CVE-2026-80715 igc: remove napi_synchronize() in igc_down()
A local attacker can cause a denial of service by abruptly killing an AF_XDP application, leading to a kernel hang in the igc network driver.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2026-80715?
CVE-2026-80715 is a denial of service vulnerability in Linux, published on 28 Aug 2026. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
In the Linux kernel, the following vulnerability has been resolved:
igc: remove napi_synchronize() in igc_down()
When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igc_clean_rx_irq_zc() then returns the full budget on every poll, so napi_complete_done() never clears NAPI_STATE_SCHED.
igc_down() calls napi_synchronize() before napi_disable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napi_synchronize() and let napi_disable() do the job -- it sets NAPI_STATE_DISABLE, which forces the stuck poll to complete. Reorder it ahead of igc_set_queue_napi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.
Which versions are affected by CVE-2026-80715?
How do I fix CVE-2026-80715?
Apply the vendor's patch.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2026-80715 being exploited?
There is no known exploitation of CVE-2026-80715 in the wild and no public exploit code.
Sources
Also known as AZL-98112, BELL-CVE-2026-80715, DEBIAN-CVE-2026-80715, GHSA-7phj-65qv-78j8, UBUNTU-CVE-2026-80715.