CVE-2026-80715
Last modified
CVE-2026-80715 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down.
Description
In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < ad6e0df267dc96edb7de1fa0a2fb2a70645bff86; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < 605585a8d89aaeb0122e9016fdaa92376897a705; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < a0f16c337691813f8d8f014c01fff5a368e08898; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < 3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < 9a2b637aef4e515c2179774888441d00e8a5ae95; >= fc9df2a0b520d7d439ecf464794d53e91be74b93, < 5ffab5b9589c50e4cfc0cf36ffd76c89422d4019 |
| Linux | Linux | 5.14 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-80715?
How severe is CVE-2026-80715?
How do I fix CVE-2026-80715?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-8071The Anti-Spam by CleanTalk. Spam protection WordPress plugin…8.8
- CVE-2026-80710In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80711In the Linux kernel, the following vulnerability has been re…
- CVE-2026-80712In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-80713In the Linux kernel, the following vulnerability has been re…8.4
- CVE-2026-80714In the Linux kernel, the following vulnerability has been re…9.8
- CVE-2026-80716In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80717In the Linux kernel, the following vulnerability has been re…7.5
- CVE-2026-80718In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-80719In the Linux kernel, the following vulnerability has been re…
- CVE-2026-8072Insecure generation of credentials in the local SAT (Technic…9.2
- CVE-2026-80720In the Linux kernel, the following vulnerability has been re…7.5
Are you affected by CVE-2026-80715?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST