CVE-2026-97434 (GCVE-0-2026-97434)
Vulnerability from cvelistv5
Published
2026-09-24 16:03
Modified
2026-10-03 10:58
Severity ?
Summary
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: fix handling of NAPI on the remove path All the NAPI instances for a DPSW device are attached to the first switch port's net_device but shared by all ports. The NAPI instances get disabled only once the last port goes down. This causes an issue on the .remove() path where each port is unregistered and freed one at a time, causing the NAPI instances to be deleted even though they are not disabled. In order to avoid this, split up the unregister_netdev() calls from the free_netdev() so that we make sure all ports go down before we attempt a deletion of NAPI instances. Also, make the netif_napi_del() explicit as it is on the .probe() path.
References
Impacted products
Vendor Product Version
Linux Linux Version: 0b1b71370458860579831e77485883fcf2e8fbbe
Version: 0b1b71370458860579831e77485883fcf2e8fbbe
Version: 0b1b71370458860579831e77485883fcf2e8fbbe
Version: 0b1b71370458860579831e77485883fcf2e8fbbe
Version: 0b1b71370458860579831e77485883fcf2e8fbbe
Version: 0b1b71370458860579831e77485883fcf2e8fbbe
 Create a notification for this product.
Show details on NVD website

To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "d39603e21087e9ef9cd125e5895cdc70b2eb154d",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            },
            {
              "lessThan": "bd16f46d0796109d241d6311a7577f9956467c96",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            },
            {
              "lessThan": "c996faba71fc465ad12c6d177bd1a9ad974f9ee8",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            },
            {
              "lessThan": "569df157eb874cb3b50554d73b89f31599397b42",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            },
            {
              "lessThan": "6518f87771c8833e587bd9881346fa759651c2ae",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            },
            {
              "lessThan": "e23d7c8c1d4ba435c457d7ffb2669175ec819b07",
              "status": "affected",
              "version": "0b1b71370458860579831e77485883fcf2e8fbbe",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "drivers/net/ethernet/freescale/dpaa2/dpaa2-switch.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.13"
            },
            {
              "lessThan": "5.13",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.222",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.189",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.158",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.222",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.189",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.158",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.111",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.53",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "5.13",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ndpaa2-switch: fix handling of NAPI on the remove path\n\nAll the NAPI instances for a DPSW device are attached to the first\nswitch port\u0027s net_device but shared by all ports. The NAPI instances get\ndisabled only once the last port goes down.\n\nThis causes an issue on the .remove() path where each port is\nunregistered and freed one at a time, causing the NAPI instances to be\ndeleted even though they are not disabled.\n\nIn order to avoid this, split up the unregister_netdev() calls from the\nfree_netdev() so that we make sure all ports go down before we attempt\na deletion of NAPI instances. Also, make the netif_napi_del() explicit\nas it is on the .probe() path."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-10-03T10:58:18.766Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/d39603e21087e9ef9cd125e5895cdc70b2eb154d"
        },
        {
          "url": "https://git.kernel.org/stable/c/bd16f46d0796109d241d6311a7577f9956467c96"
        },
        {
          "url": "https://git.kernel.org/stable/c/c996faba71fc465ad12c6d177bd1a9ad974f9ee8"
        },
        {
          "url": "https://git.kernel.org/stable/c/569df157eb874cb3b50554d73b89f31599397b42"
        },
        {
          "url": "https://git.kernel.org/stable/c/6518f87771c8833e587bd9881346fa759651c2ae"
        },
        {
          "url": "https://git.kernel.org/stable/c/e23d7c8c1d4ba435c457d7ffb2669175ec819b07"
        }
      ],
      "title": "dpaa2-switch: fix handling of NAPI on the remove path",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-97434",
    "datePublished": "2026-09-24T16:03:47.069Z",
    "dateReserved": "2026-09-24T14:53:16.869Z",
    "dateUpdated": "2026-10-03T10:58:18.766Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.