CVE-2026-97434

dpaa2-switch: fix handling of NAPI on the remove path

State
Published
Severity
Not scored
Published
Sep 24, 2026
Updated
Oct 3, 2026
Reserved
Sep 24, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-switch: fix handling of NAPI on the remove path

All the NAPI instances for a DPSW device are attached to the first switch port's net_device but shared by all ports. The NAPI instances get disabled only once the last port goes down.

This causes an issue on the .remove() path where each port is unregistered and freed one at a time, causing the NAPI instances to be deleted even though they are not disabled.

In order to avoid this, split up the unregister_netdev() calls from the free_netdev() so that we make sure all ports go down before we attempt a deletion of NAPI instances. Also, make the netif_napi_del() explicit as it is on the .probe() path.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before d39603e21087e9ef9cd125e5895cdc70b2eb154dAffected
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before bd16f46d0796109d241d6311a7577f9956467c96Affected
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before c996faba71fc465ad12c6d177bd1a9ad974f9ee8Affected
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before 569df157eb874cb3b50554d73b89f31599397b42Affected
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before 6518f87771c8833e587bd9881346fa759651c2aeAffected
  • 0b1b71370458860579831e77485883fcf2e8fbbe to before e23d7c8c1d4ba435c457d7ffb2669175ec819b07Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.222 through 5.15.*Not affected
  • 6.1.189 through 6.1.*Not affected
  • 6.6.158 through 6.6.*Not affected
  • 6.12.111 through 6.12.*Not affected
  • 6.18.53 through 6.18.*Not affected
  • 7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.