CVE-2026-97434
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
24/09/2026
Last modified:
25/09/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
dpaa2-switch: fix handling of NAPI on the remove path<br />
<br />
All the NAPI instances for a DPSW device are attached to the first<br />
switch port&#39;s net_device but shared by all ports. The NAPI instances get<br />
disabled only once the last port goes down.<br />
<br />
This causes an issue on the .remove() path where each port is<br />
unregistered and freed one at a time, causing the NAPI instances to be<br />
deleted even though they are not disabled.<br />
<br />
In order to avoid this, split up the unregister_netdev() calls from the<br />
free_netdev() so that we make sure all ports go down before we attempt<br />
a deletion of NAPI instances. Also, make the netif_napi_del() explicit<br />
as it is on the .probe() path.


