7.8

CVE-2026-23422

dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ
handler") introduces a range check for if_id to avoid an out-of-bounds
access. If an out-of-bounds if_id is detected, the interrupt status is
not cleared. This may result in an interrupt storm.

Clear the interrupt status after detecting an out-of-bounds if_id to avoid
the problem.

Found by an experimental AI code review agent at Google.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 5.15.200 < 5.15.203
Linux ≫ Linux Kernel Version >= 6.1.163 < 6.1.167
Linux ≫ Linux Kernel Version >= 6.6.124 < 6.6.130
Linux ≫ Linux Kernel Version >= 6.12.70 < 6.12.77
Linux ≫ Linux Kernel Version >= 6.18.10 < 6.18.17
Linux ≫ Linux Kernel Version >= 6.19.1 < 6.19.7
Linux ≫ Linux Kernel Version 6.19 Update -
Linux ≫ Linux Kernel Version 7.0 Update rc1
Linux ≫ Linux Kernel Version 7.0 Update rc2
Linux ≫ Linux Kernel Version 7.0 Update rc3
Linux ≫ Linux Kernel Version 7.0 Update rc4
Linux ≫ Linux Kernel Version 7.0 Update rc5
Linux ≫ Linux Kernel Version 7.0 Update rc6
Linux ≫ Linux Kernel Version 7.0 Update rc7
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.025
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE-787 Out-of-bounds Write

The product writes data past the end, or before the beginning, of the intended buffer.

https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4
Patch
https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e
Patch
https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703
Patch
https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796
Patch
https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8
Patch
https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93
Patch
https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d
Patch
https://cert-portal.siemens.com/productcert/html/ssa-082556.html
https://cert-portal.siemens.com/productcert/html/ssa-019113.html