{"id":"CVE-2026-23313","title":"i40e: Fix preempt count leak in napi poll tracepoint","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix preempt count leak in napi poll tracepoint\n\nUsing get_cpu() in the tracepoint assignment causes an obvious preempt\ncount leak because nothing invokes put_cpu(…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7","Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < b7e91827e1cf89cd34ad11dc8f8c010b70ab786e","Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < 9e0f091821571f0da387462803ee42f0bb157582","Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f","Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < 4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9","Linux 6.2"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-05T21:26:37.670446Z"},"published":"2026-03-25","updated":"2026-11-05","sourceUpdated":"2026-11-05T21:33:38.240Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-23313","references":[{"url":"https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7"},{"url":"https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e"},{"url":"https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582"},{"url":"https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f"},{"url":"https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9"}],"tags":["cve.org"],"epss":0.00127,"epssPercentile":0.02369,"ingestedAt":"2026-11-05T22:38:32.114Z","slug":"CVE-2026-23313","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ni40e: Fix preempt count leak in napi poll tracepoint\n\nUsing get_cpu() in the tracepoint assignment causes an obvious preempt\ncount leak because nothing invokes put_cpu() to undo it:\n\n  softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101?\n\nThis clearly has seen a lot of testing in the last 3+ years...\n\nUse smp_processor_id() instead.\n\n## Affected\n\n- `Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7`\n- `Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < b7e91827e1cf89cd34ad11dc8f8c010b70ab786e`\n- `Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < 9e0f091821571f0da387462803ee42f0bb157582`\n- `Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f`\n- `Linux >= 6d4d584a7ea8fc8d2be77545cb503118c193738a < 4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9`\n- `Linux 6.2`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}