CVE-2026-23313
- Source
- https://cve.org/CVERecord?id=CVE-2026-23313
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-23313.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-23313
- Downstream
- Published
- 2026-03-25T10:27:08.686Z
- Modified
- 2026-04-02T13:12:20.952198Z
- Summary
- i40e: Fix preempt count leak in napi poll tracepoint
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
i40e: Fix preempt count leak in napi poll tracepoint
Using getcpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes putcpu() to undo it:
softirq: huh, entered softirq 3 NETRX with preemptcount 00000100, exited with 00000101?
This clearly has seen a lot of testing in the last 3+ years...
Use smpprocessorid() instead.
- Database specific
{ "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23313.json", "cna_assigner": "Linux" }- References
-
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9
- https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582
- https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e
- https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23313.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-23313
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6d4d584a7ea8fc8d2be77545cb503118c193738aFixedb7e91827e1cf89cd34ad11dc8f8c010b70ab786eFixed9e0f091821571f0da387462803ee42f0bb157582Fixeddca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561fFixed4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9