PT-2026-27678

CVE-2026-23313

·

Published

2026-01-01

·

Updated

2026-10-17

Description by

CVSS 3.1
5.5
Medium
MetricsAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains an issue in the i40e network driver related to a preempt count leak within the napi poll tracepoint. The use of get cpu() in the tracepoint assignment leads to a preempt count leak because put cpu() is not called to undo the operation. This can be observed through softirq messages indicating an increase in the preempt count. The issue was identified and resolved by switching to smp processor id().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
AZL-80597
CLSA-2026-1787305050
CLSA-2026-1787307395
OESA-2026-2418
OESA-2026-2493
OPENSUSE-SU-2026:20826-1
SUSE-SU-2026:21834-1
SUSE-SU-2026:21841-1
SUSE-SU-2026:21845-1
SUSE-SU-2026:21860-1
SUSE-SU-2026:21876-1
SUSE-SU-2026:21877-1
SUSE-SU-2026:21916-1
SUSE-SU-2026:21919-1
SUSE-SU-2026:2217-1
SUSE-SU-2026:2238-1
USN-8567-1
USN-8574-1
USN-8574-2
USN-8574-3
USN-8595-1
USN-8595-2
USN-8595-3
USN-8596-1
USN-8606-1
USN-8607-1
USN-8608-1
USN-8609-1
USN-8619-1
USN-8665-1
Found an issue in the description? Have something to add? Feel free to write us 👾