CVE-2026-23422

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2026-23422
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ handler") introduces a range check for if_id to avoid an out-of-bounds access. If an out-of-bounds if_id is detected, the interrupt status is not cleared. This may result in an interrupt storm. Clear the interrupt status after detecting an out-of-bounds if_id to avoid the problem. Found by an experimental AI code review agent at Google.

7.8 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 Patch
https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 Patch
https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 Patch
https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d Patch
https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 Patch
https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e Patch
https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 Patch
Configurations

Configuration 1 (hide)

OR cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
History

24 Apr 2026, 15:21

Type Values Removed Values Added
CWE CWE-787
First Time Linux
Linux linux Kernel
CVSS v2 : unknown
v3 : unknown 		v2 : unknown
v3 : 7.8
References () https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 - () https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 - Patch
References () https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 - () https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 - Patch
References () https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 - () https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 - Patch
References () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d - () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d - Patch
References () https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 - () https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 - Patch
References () https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e - () https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e - Patch
References () https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 - () https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 - Patch
CPE cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:6.19:-:*:*:*:*:*:*
cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:*

18 Apr 2026, 09:16

Type Values Removed Values Added
References
  • () https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d -

03 Apr 2026, 14:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-04-03 14:16

Updated : 2026-04-24 15:21

NVD link : CVE-2026-23422

Mitre link : CVE-2026-23422

CVE.ORG link : CVE-2026-23422

JSON object : View

Products Affected

linux

  • linux_kernel
CWE
CWE-787

Out-of-bounds Write