PT-2026-72597

CVE-2026-72409

·

Published

2026-06-22

·

Updated

2026-11-03

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description On Marvell MPIC platforms (Armada 370/XP/38x), the mvneta driver uses a per-CPU interrupt request (IRQ) disable/enable scheme for NAPI (New API, a mechanism for reducing interrupt overhead). The interrupt service routine (ISR) mvneta percpu isr() calls disable percpu irq() to mask the MPIC per-CPU interrupt and schedules a NAPI poll, which is intended to call enable percpu irq() upon completion.
If a system suspend occurs while the NAPI poll is pending, the interrupt is not re-enabled during the resume process. This happens because the napi disable() function in mvneta stop dev cancels the pending poll without executing the completion path, and the mpic resume function skips unmasking the interrupt if it was already disabled. Consequently, the MPIC per-CPU interrupt remains masked permanently, preventing the CPU from receiving interrupts from the NIC and resulting in a complete loss of network connectivity.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Vendors
Affected products
Related identifiers
USN-8875-1
USN-8875-2
USN-8876-1
USN-8877-1
USN-8878-1
USN-8879-1
USN-8886-1
USN-8887-1
USN-8887-2
USN-8887-3
USN-8888-1
USN-8888-2
USN-8889-1
USN-8917-1
USN-8918-1
USN-8963-1
Found an issue in the description? Have something to add? Feel free to write us 👾