Cloudanix VulnDB

CVE-2026-99048

None

CVSS

—

EPSS

0.2%

Published

Oct 23, 2026

CISA due date

—

Cloudanix analysis

Schedule a fix SSVC: Track

A bug in Linux network driver code can cause the system to freeze when managing certain network features, leading to outages until fixed or rebooted.

Exploitation
Local Privilege
Attacker needs
Local User
Complexity
Moderate
Impact
Denial Of Service
Component
OS kernel
Class
Race Condition
Remediation
Upgrade
Effort
Medium
Patch risk
Low

What it actually does

Deadlock occurs in the GVE driver when unlocked napi_disable/napi_enable are called while the netdev lock is already held during XSK pool disable operations due to queue management support.

Why it matters to the business

Network interface handling in affected Linux systems can hang, causing service disruption and requiring reboots on production hosts using the GVE driver.

How an attack unfolds

An attacker with local access triggers XSK pool disable operations on a GVE interface while queue management ops hold the netdev lock, forcing re-acquisition of the already-held lock and resulting in deadlock.

How to fix it

Apply the upstream kernel patch that replaces unlocked napi_disable and napi_enable calls with their locked counterparts in the GVE driver XSK handling code.

How to confirm the fix worked

Verify the presence of the fix commit updating NAPI calls to locked versions; test XSK pool disable operations under load to confirm no deadlock occurs.

Typical attack path

  1. Obtain local access to a system using the GVE driver
  2. Perform operations that invoke ndo_bpf for XSK pool management
  3. Trigger the code path that calls unlocked NAPI disable while netdev lock is held
  4. Cause thread to deadlock attempting lock re-acquisition

How to detect it

Review kernel logs and dmesg for deadlock warnings or hung task messages involving napi_disable in GVE contexts; correlate with XSK pool management events.

What your security team should do

  • Prioritize kernel updates containing the GVE NAPI fix within the next maintenance window given the two-day publication age
  • Monitor for production reports of GVE-related deadlocks until patched
  • Restrict local unprivileged access to systems exposing GVE interfaces where feasible

The record

In the Linux kernel, the following vulnerability has been resolved: gve: fix napi_disable deadlock when attempting to disable XSK pools When disabling XSK pools, GVE calls the unlocked versions of napi_disable and napi_enable. However, the netdev lock has already been acquired before ndo_bpf is called because GVE supports queue management ops. Calling the unlocked versions of napi_disable/enable results in a deadlock when attempting to disable XSK pools, as the thread attempts to re-acquire a lock it already holds. Update the NAPI calls to use the locked versions. This issue was found in production.

Affected packages

Ecosystem Package Introduced Fixed