CVE-2026-80715igc: remove napi_synchronize() in igc_down()
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Aug 28, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from fc9df2a0b520d7d439ecf464794d53e91be74b93 before ad6e0df267dc96edb7de1fa0a2fb2a70645bff86; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before 605585a8d89aaeb0122e9016fdaa92376897a705; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before a0f16c337691813f8d8f014c01fff5a368e08898; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before 3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before 9a2b637aef4e515c2179774888441d00e8a5ae95; from fc9df2a0b520d7d439ecf464794d53e91be74b93 before 5ffab5b9589c50e4cfc0cf36ffd76c89422d4019 | CNA record |
References
- https://git.kernel.org/stable/c/ad6e0df267dc96edb7de1fa0a2fb2a70645bff86
- https://git.kernel.org/stable/c/605585a8d89aaeb0122e9016fdaa92376897a705
- https://git.kernel.org/stable/c/a0f16c337691813f8d8f014c01fff5a368e08898
- https://git.kernel.org/stable/c/f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2
- https://git.kernel.org/stable/c/3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668
- https://git.kernel.org/stable/c/9a2b637aef4e515c2179774888441d00e8a5ae95
- https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.