CVE-2026-97603

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the idpf driver where Tx/Rx DIM works are not drained before the memory they reside in is freed. The tx dim and rx dim works are embedded in the idpf q vector structure, which is freed during idpf vport intr rel() via kfree(rsrc->q vectors). Because these works are not cancelled, the functions idpf tx dim work() and idpf rx dim work() may execute on freed memory. This leads to idpf vport intr write itr() attempting to write to the ITR register using void iomem pointers loaded from the freed q vector. This issue occurs when IDPF ITR IS DYNAMIC() is active, which is the default initialization in idpf vport alloc().

Recommendations As a temporary mitigation, restrict the use of the idpf driver or avoid frequent ifup/ifdown cycles under heavy load until a patch is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.