CVE-2026-23313

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23313
In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes put_cpu() to undo it: softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101? This clearly has seen a lot of testing in the last 3+ years... Use smp_processor_id() instead.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9 Patch
https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582 Patch
https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e Patch
https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f Patch
https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
History

26 May 2026, 15:01

Type Values Removed Values Added
First Time Linux
Linux linux Kernel
CWE NVD-CWE-Other
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 5.5
References () https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9 - () https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9 - Patch
References () https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582 - () https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582 - Patch
References () https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e - () https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e - Patch
References () https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f - () https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f - Patch
References () https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7 - () https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7 - Patch

27 Apr 2026, 14:16

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: i40e: Solución a la fuga del contador de preemption en el tracepoint de sondeo de napi Usar get_cpu() en la asignación del tracepoint causa una fuga obvia del contador de preemption porque nada invoca put_cpu() para deshacerlo: 'softirq: eh, entró en softirq 3 NET_RX con preempt_count 00000100, salió con 00000101?' Esto claramente ha sido sometido a muchas pruebas en los últimos 3+ años... Usar smp_processor_id() en su lugar.
References
  • () https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7 -

25 Mar 2026, 11:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-25 11:16

Updated : 2026-05-26 15:01

NVD link : CVE-2026-23313

Mitre link : CVE-2026-23313

CVE.ORG link : CVE-2026-23313

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
NVD-CWE-Other