VYPR
Medium severity5.5NVD Advisory· Published Mar 25, 2026· Updated Jun 17, 2026

CVE-2026-23313

CVE-2026-23313

Description

In the Linux kernel, the following vulnerability has been resolved:

i40e: Fix preempt count leak in napi poll tracepoint

Using get_cpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes put_cpu() to undo it:

softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101?

This clearly has seen a lot of testing in the last 3+ years...

Use smp_processor_id() instead.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5
  • osv-coords
    Range: >= 6.2.0, < 6.6.136
  • Linux/Kernelllm-fuzzy4 versions
    (expand)+ 3 more
    • (no CPE)
    • cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=6.2,<6.6.136
    • cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:*
    • cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.