Skip to content
Heist/ feed
Back to feed
UnratedFix available

igc: remove napi_synchronize() in igc_down()

Type: advisorySources: OSV

In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.

Products
Kernel
Affected versions
Not specified
Fixed versions
5.15.217, 6.1.184, 6.12.105, 6.18.44, 6.6.153, 7.1.8
CVEs
CVE-2026-80715
Confirmed fixed CVEs
Not specified
Updated in this feed
6 Nov 2026, 01:35 UTC · Revision 1

Source evidence

igc: remove napi_synchronize() in igc_down()

core-osv · Original source

Published 28 Aug 2026, 06:53 UTC

In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.

osv:CVE-2026-80715

Kernel

Fixed versions: 5.15.217, 6.1.184, 6.6.153, 6.12.105, 6.18.44, 7.1.8

Complete source record
{
  "id": "403b70e80074466892cc970fc7fa96a94d9ab9c2b7f02489e27323ea787a14eb",
  "url": "https://osv.dev/vulnerability/CVE-2026-80715",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "igc: remove napi_synchronize() in igc_down()",
    "summary": "In the Linux kernel, the following vulnerability has been resolved: igc: remove napi_synchronize() in igc_down() When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED. igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.",
    "evidence": "osv:CVE-2026-80715",
    "products": [
      {
        "name": {
          "value": "Kernel",
          "evidence": "/affected/1/package/name"
        },
        "prerequisites": [],
        "fixed_versions": [
          {
            "value": "5.15.217",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.1.184",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.6.153",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.12.105",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "6.18.44",
            "evidence": "/affected/1/ranges"
          },
          {
            "value": "7.1.8",
            "evidence": "/affected/1/ranges"
          }
        ],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "structured": {
      "id": "CVE-2026-80715",
      "aliases": [
        "CVE-2026-80715"
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
              "type": "GIT",
              "events": [
                {
                  "introduced": "fc9df2a0b520d7d439ecf464794d53e91be74b93"
                },
                {
                  "fixed": "ad6e0df267dc96edb7de1fa0a2fb2a70645bff86"
                },
                {
                  "fixed": "605585a8d89aaeb0122e9016fdaa92376897a705"
                },
                {
                  "fixed": "a0f16c337691813f8d8f014c01fff5a368e08898"
                },
                {
                  "fixed": "f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2"
                },
                {
                  "fixed": "3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668"
                },
                {
                  "fixed": "9a2b637aef4e515c2179774888441d00e8a5ae95"
                },
                {
                  "fixed": "5ffab5b9589c50e4cfc0cf36ffd76c89422d4019"
                }
              ]
            }
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80715.json"
          }
        },
        {
          "ranges": [
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.14.0"
                },
                {
                  "fixed": "5.15.217"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "5.16.0"
                },
                {
                  "fixed": "6.1.184"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.2.0"
                },
                {
                  "fixed": "6.6.153"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.7.0"
                },
                {
                  "fixed": "6.12.105"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.13.0"
                },
                {
                  "fixed": "6.18.44"
                }
              ]
            },
            {
              "type": "ECOSYSTEM",
              "events": [
                {
                  "introduced": "6.19.0"
                },
                {
                  "fixed": "7.1.8"
                }
              ]
            }
          ],
          "package": {
            "name": "Kernel",
            "ecosystem": "Linux"
          },
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-80715.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:45.788670556Z",
      "provider": "osv",
      "references": [
        "https://git.kernel.org/stable/c/3b5aee6fcbf6b58112d40d19c8d31fa3f78ee668",
        "https://git.kernel.org/stable/c/5ffab5b9589c50e4cfc0cf36ffd76c89422d4019",
        "https://git.kernel.org/stable/c/605585a8d89aaeb0122e9016fdaa92376897a705",
        "https://git.kernel.org/stable/c/9a2b637aef4e515c2179774888441d00e8a5ae95",
        "https://git.kernel.org/stable/c/a0f16c337691813f8d8f014c01fff5a368e08898",
        "https://git.kernel.org/stable/c/ad6e0df267dc96edb7de1fa0a2fb2a70645bff86",
        "https://git.kernel.org/stable/c/f929a6fe5b7ae1e72d2c6d18cd69ab90dcf689d2",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80715.json",
        "https://nvd.nist.gov/vuln/detail/CVE-2026-80715",
        "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"
      ],
      "provider_metadata": {
        "cna_assigner": "Linux",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/80xxx/CVE-2026-80715.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2026-80715",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "core-osv",
  "document_id": 513911,
  "published_at": "2026-08-28T06:53:13.683+00:00"
}