CVE-2026-23422

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23422
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ handler") introduces a range check for if_id to avoid an out-of-bounds access. If an out-of-bounds if_id is detected, the interrupt status is not cleared. This may result in an interrupt storm. Clear the interrupt status after detecting an out-of-bounds if_id to avoid the problem. Found by an experimental AI code review agent at Google.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 Patch
https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 Patch
https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 Patch
https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d Patch
https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 Patch
https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e Patch
https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 Patch
https://cert-portal.siemens.com/productcert/html/ssa-019113.html
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

24 Jul 2026, 21:10

Type Values Removed Values Added
Summary
  • (es) En el kernel de Linux, la siguiente vulnerabilidad ha sido resuelta: dpaa2-switch: Corrección de tormenta de interrupciones después de recibir un if_id incorrecto en el gestor IRQ El commit 31a7a0bbeb00 ('dpaa2-switch: añade comprobación de límites para if_id en el gestor IRQ') introduce una comprobación de rango para if_id para evitar un acceso fuera de límites. Si se detecta un if_id fuera de límites, el estado de la interrupción no se borra. Esto puede resultar en una tormenta de interrupciones. Borrar el estado de la interrupción después de detectar un if_id fuera de límites para evitar el problema. Encontrado por un agente experimental de revisión de código de IA en Google.

14 Jul 2026, 13:18

Type Values Removed Values Added
References
  • () https://cert-portal.siemens.com/productcert/html/ssa-019113.html -
  • () https://cert-portal.siemens.com/productcert/html/ssa-082556.html -

24 Apr 2026, 15:21

Type Values Removed Values Added
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
CWE CWE-787
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 - () https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 - Patch
References () https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 - () https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 - Patch
References () https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 - () https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 - Patch
References () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d - () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d - Patch
References () https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 - () https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 - Patch
References () https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e - () https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e - Patch
References () https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 - () https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 - Patch

18 Apr 2026, 09:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d -

03 Apr 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-03 14:16

Updated : 2026-07-24 21:10

NVD link : CVE-2026-23422

Mitre link : CVE-2026-23422

CVE.ORG link : CVE-2026-23422

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write