PT-2026-27678 · Linux · Linux Kernel

Published

2026-01-01

·

Updated

2026-05-26

·

CVE-2026-23313

CVSS v3.1

5.5

Medium

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description The Linux kernel contains an issue in the i40e network driver related to a preempt count leak within the napi poll tracepoint. The use of get cpu() in the tracepoint assignment leads to a preempt count leak because put cpu() is not called to undo the operation. This can be observed through softirq messages indicating an increase in the preempt count. The issue was identified and resolved by switching to smp processor id().
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23313

Affected Products

Linux Kernel