{"schema":"threatline.record/2","record":{"id":"CVE-2026-99048","aliases":[],"summary":"gve: fix napi_disable deadlock when attempting to disable XSK pools","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix napi_disable deadlock when attempting to disable XSK pools\n\nWhen disabling XSK pools, GVE calls the unlocked versions of\nnapi_disable and napi_enable. However, the netdev lock has already been\nacquired before ndo_bpf is called because GVE supports queue management\nops. Calling the unlocked versions of napi_disable/enable results in a\ndeadlock when attempting to disable XSK pools, as the thread attempts to\nre-acquire a lock it already holds.\n\nUpdate the NAPI calls to use the locked versions.\n\nThis issue was found in production.","categories":["Operating systems"],"product":"Linux","vendor":"Linux","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","source_modified_at":"2026-10-23T12:22:13.825Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"606048cbd8346e616cfaee01b0143d072534136d","lessThan":"42935a61001927aa01db10b53b420efd37eaa99b","status":"affected","versionType":"git"},{"version":"606048cbd8346e616cfaee01b0143d072534136d","lessThan":"3d377911ce81fd4e61af814e750d8e08879a5208","status":"affected","versionType":"git"},{"version":"606048cbd8346e616cfaee01b0143d072534136d","lessThan":"0cb6939a4dfefa822007b7a71986e06bc4f61f54","status":"affected","versionType":"git"}],"defaultStatus":"unaffected"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","source_modified_at":"2026-10-23T12:22:13.825Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"Linux","vendor":"Linux","versions":[{"version":"6.16","status":"affected"},{"version":"0","lessThan":"6.16","status":"unaffected","versionType":"semver"},{"version":"6.18.57","lessThanOrEqual":"6.18.*","status":"unaffected","versionType":"semver"},{"version":"7.2.11","lessThanOrEqual":"7.2.*","status":"unaffected","versionType":"semver"},{"version":"7.3","lessThanOrEqual":"*","status":"unaffected","versionType":"original_commit_for_fix"}],"defaultStatus":"affected"}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","source_modified_at":"2026-10-23T12:22:13.825Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"42935a61001927aa01db10b53b420efd37eaa99b","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","source_modified_at":"2026-10-23T12:22:13.825Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"3d377911ce81fd4e61af814e750d8e08879a5208","basis":"first unaffected version stated in the CVE record"},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","source_modified_at":"2026-10-23T12:22:13.825Z","fetched_at":"2026-10-23T18:42:43.628194Z","package":{"name":"Linux","ecosystem":null},"version":"0cb6939a4dfefa822007b7a71986e06bc4f61f54","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T12:22:13.825Z","modified_at":"2026-10-23T12:22:13.825Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-99048","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T12:22:13.825Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://git.kernel.org/stable/c/42935a61001927aa01db10b53b420efd37eaa99b"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/3d377911ce81fd4e61af814e750d8e08879a5208"},{"source":"CVE List","url":"https://git.kernel.org/stable/c/0cb6939a4dfefa822007b7a71986e06bc4f61f54"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-23T12:22:13.825Z","content_hash":"782379d1def62a01934de4f6c0a648b62af6133319e5338cf644637bd4604f9d"}}