CVE-2026-23422: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-04-03 · updated 2026-10-15
Weakness: CWE-787

Description

In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ handler") introduces a range check for if_id to avoid an out-of-bounds access. If an out-of-bounds if_id is detected, the interrupt status is not cleared. This may result in an interrupt storm. Clear the interrupt status after detecting an out-of-bounds if_id to avoid the problem. Found by an experimental AI code review agent at Google.

Affected products

Linux kernel: from 5.15.200 before 5.15.203; from 6.1.163 before 6.1.167; from 6.6.124 before 6.6.130; from 6.12.70 before 6.12.77; from 6.18.10 before 6.18.17; from 6.19.1 before 6.19.7 — fixed in 5.15.203, 6.1.167, 6.12.77, 6.18.17, 6.19.7, 6.6.130

How to fix

Upgrade to a fixed version: Linux kernel 5.15.203, 6.1.167, 6.12.77, 6.18.17. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-23422 or the next vulnerability affects your stack