CVE-2026-99048
gve: fix napi_disable deadlock when attempting to disable XSK pools
Fetching some sources has been requested. Reload in about a minute to see them.
Description
In the Linux kernel, the following vulnerability has been resolved: gve: fix napi_disable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napi_disable and napi_enable. However, the netdev lock has already been acquired before ndo_bpf is called because GVE supports queue management ops. Calling the unlocked versions of napi_disable/enable results in a deadlock when attempting to disable XSK pools, as the thread attempts to re-acquire a lock it already holds. Update the NAPI calls to use the locked versions. This issue was found in production.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: 606048cbd8346e616cfaee01b0143d072534136d … < 42935a61001927aa01db10b53b420efd37eaa99b affected: 606048cbd8346e616cfaee01b0143d072534136d … < 3d377911ce81fd4e61af814e750d8e08879a5208 affected: 606048cbd8346e616cfaee01b0143d072534136d … < 0cb6939a4dfefa822007b7a71986e06bc4f61f54 default: unaffected |
| Linux | Linux | affected: 6.16 unaffected: 0 … < 6.16 unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
gve: fix napi_disable deadlock when attempting to disable XSK pools
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= 606048cbd8346e616cfaee01b0143d072534136d, < 42935a61001927aa01db10b53b420efd37eaa99b; < 3d377911ce81fd4e61af814e750d8e08879a5208; < 0cb6939a4dfefa822007b7a71986e06bc4f61f54 | 42935a61001927aa01db10b53b420efd37eaa99b, 3d377911ce81fd4e61af814e750d8e08879a5208, 0cb6939a4dfefa822007b7a71986e06bc4f61f54 | ||
| Linux | Kernel | >= 6.16.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.18.57, 7.2.11 |
Linux distribution status
References (6)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/0cb6939a4dfefa822007b7a71986e06bc4f61f54 NVD, CNA, OSV
- https://git.kernel.org/stable/c/3d377911ce81fd4e61af814e750d8e08879a5208 NVD, CNA, OSV
- https://git.kernel.org/stable/c/42935a61001927aa01db10b53b420efd37eaa99b NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99048.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-99048 OSV