CVE-2026-99048
Linux: gve: fix napi_disable deadlock when attempting to disable XSK pools
Linux LinuxOperating systemsCVSS
NoneNot scoredExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed in42935a61001927aa01db10b53b420efd37eaa99bAlso 3d377911ce81fd4e61af814e750d8e08879a5208, 0cb6939a4dfefa822007b7a71986e06bc4f61f54CVE List
What fixes it
- 42935a61001927aa01db10b53b420efd37eaa99bLinuxCVE List
- 3d377911ce81fd4e61af814e750d8e08879a5208LinuxCVE List
- 0cb6939a4dfefa822007b7a71986e06bc4f61f54LinuxCVE List
A fixed version on one release line is not the upgrade target for every line. Check your exact version and any vendor backports.
Description
In the Linux kernel, the following vulnerability has been resolved:
gve: fix napi_disable deadlock when attempting to disable XSK pools
When disabling XSK pools, GVE calls the unlocked versions of napi_disable and napi_enable. However, the netdev lock has already been acquired before ndo_bpf is called because GVE supports queue management ops. Calling the unlocked versions of napi_disable/enable results in a deadlock when attempting to disable XSK pools, as the thread attempts to re-acquire a lock it already holds.
Update the NAPI calls to use the locked versions.
This issue was found in production.
Text from CVE List
Affected versions 8
- Linuxaffected: 606048cbd8346e616cfaee01b0143d072534136d before 42935a61001927aa01db10b53b420efd37eaa99bCVE List
- Linuxaffected: 606048cbd8346e616cfaee01b0143d072534136d before 3d377911ce81fd4e61af814e750d8e08879a5208CVE List
- Linuxaffected: 606048cbd8346e616cfaee01b0143d072534136d before 0cb6939a4dfefa822007b7a71986e06bc4f61f54CVE List
- Linuxaffected: 6.16CVE List
- Linuxunaffected: all versions before 6.16CVE List
- Linuxunaffected: 6.18.57 through 6.18.*CVE List
- Linuxunaffected: 7.2.11 through 7.2.*CVE List
- Linuxunaffected: 7.3CVE List