CVE-2026-80715
Received Received - Intake

igc Network Driver NAPI State Handling Flaw

Vulnerability report for CVE-2026-80715, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-08-28

Last updated on: 2026-08-28

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-28
Last Modified
2026-08-28
Generated
2026-09-17
AI Q&A
2026-08-28
EPSS Evaluated
2026-09-15
NVD
EUVD

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel igc *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a race condition in the igc network driver. When an AF_XDP zero-copy application is terminated abruptly, the XSK pool is destroyed but NAPI (New API for network processing) continues polling. This causes igc_clean_rx_irq_zc() to return the full budget on every poll, preventing napi_complete_done() from clearing NAPI_STATE_SCHED. The igc_down() function then calls napi_synchronize() which spins forever waiting for NAPI_STATE_SCHED to clear, blocking the interface from going down.

Detection Guidance

This vulnerability may cause network interface issues when AF_XDP applications are terminated abruptly. Check for symptoms like interfaces failing to go down or high CPU usage from NAPI polling. Monitor logs for igc-related errors or interface timeouts.

Impact Analysis

This vulnerability can cause network interfaces to hang or become unresponsive when an AF_XDP application crashes or is killed. The system may fail to properly shut down the network interface, leading to potential network downtime or connectivity issues.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It is a kernel-level issue causing a system hang under specific conditions, not a data breach or privacy violation.

Mitigation Strategies

Update the Linux kernel to a patched version where this issue is resolved. Avoid abrupt termination of AF_XDP applications. If affected, restart the network service or reboot the system to clear stuck NAPI states.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-80715. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart