SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-80715

UNKNOWN · CVSS N/A EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-28 · Last synced 2026-09-20

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's igc driver, specifically in the handling of NAPI (New API) during the abrupt termination of AF_XDP zero-copy applications. This flaw can lead to a situation where the network interface fails to shut down properly, resulting in a potential denial of service due to the interface being stuck in a polling state. Organizations using Linux systems with the igc driver should prioritize addressing this issue to ensure network reliability and prevent service disruptions.

CVE
CVE-2026-80715
Severity
UNKNOWN
CVSS
N/A
EPSS
0.16%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.