PT-2026-30036 · Linux · Linux Kernel

Experimental Ai Code Review Agent · Published 2026-04-03 · Updated 2026-04-14 · CVE-2026-23422

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The Linux kernel contains a flaw within the dpaa2-switch component that can lead to an interrupt storm. This occurs when an invalid if id is received in the IRQ handler. A range check was introduced in commit 31a7a0bbeb00 to prevent out-of-bounds access, but the interrupt status was not cleared when an invalid if id was detected, resulting in the storm. The issue was discovered by an AI code review agent.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2026-23422

ECHO-32E7-1B33-685B

Affected Products

Linux Kernel

References · 19

• https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23422 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23422 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23422 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23422 · Vendor Advisory
• https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8 · Patch
• https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e · Patch
• https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d · Patch
• https://osv.dev/vulnerability/BELL-CVE-2026-23422 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2026-23422 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23422 · Security Note
• https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93 · Patch
• https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796 · Patch
• https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4 · Patch
• https://twitter.com/infoflowcloud/status/2040113567811187115 · Twitter Post