What’s Vulnerable › Vulnerabilities

CVE-2026-23313: i40e: Fix preempt count leak in napi poll tracepoint

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-03-25 · updated 2026-06-17

Description

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes put_cpu() to undo it: softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101? This clearly has seen a lot of testing in the last 3+ years... Use smp_processor_id() instead.

Affected products

• Linux kernel: from 6.2 before 6.6.136; from 6.7 before 6.12.77; from 6.13 before 6.18.17; from 6.19 before 6.19.7; 7.0-rc1, 7.0-rc2 — fixed in 6.12.77, 6.18.17, 6.19.7, 6.6.136

How to fix

Upgrade to a fixed version: Linux kernel 6.12.77, 6.18.17, 6.19.7, 6.6.136. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9
• https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582
• https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e
• https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f
• https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7

Get alerted when CVE-2026-23313 or the next vulnerability affects your stack