CVE-2026-23313 Details
Description
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes put_cpu() to undo it: softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101? This clearly has seen a lot of testing in the last 3+ years... Use smp_processor_id() instead.
A vulnerability in the Linux kernel's i40e network driver has been addressed, which involved a preempt count leak in the NAPI poll tracepoint. The issue arose from using 'get_cpu()' in the tracepoint assignment, leading to an unbalanced preempt count. This leak was noticeable during softirq processing, where the preempt count increased without being properly decremented. The vulnerability affects the Linux kernel stable tree and has been present for over three years.
The vulnerability has been fixed by replacing 'get_cpu()' with 'smp_processor_id()' in the tracepoint assignment, ensuring that the preempt count is correctly managed.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9 | kernel.org | Patch |
| https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582 | kernel.org | Patch |
| https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e | kernel.org | Patch |
| https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f | kernel.org | Patch |
| https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-Other | Weakness Not in a Standard CWE Category | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.2, < 6.6.136 >= 6.7, < 6.12.77 >= 6.13, < 6.18.17 >= 6.19, < 6.19.7 7.0 rc1 7.0 rc2 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | kernel.org |
| May 26, 2026 | Initial Analysis | [email protected] |
| Apr 27, 2026 | CVE Modified | kernel.org |
| Mar 25, 2026 | New CVE Received | kernel.org |