---
id: CVE-2026-23422
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

  Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ
  handler") introduces a…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

  Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ
  handler") introduces a…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-787
vendor: linux
product: linux_kernel
affected:
  - 'linux_kernel >= 5.15.200, < 5.15.203'
  - 'linux_kernel >= 6.1.163, < 6.1.167'
  - 'linux_kernel >= 6.6.124, < 6.6.130'
  - 'linux_kernel >= 6.12.70, < 6.12.77'
  - 'linux_kernel >= 6.18.10, < 6.18.17'
  - 'linux_kernel >= 6.19.1, < 6.19.7'
  - linux_kernel = 6.19
  - linux_kernel = 7.0
patched:
  - linux_kernel 6.19.7
published: '2026-04-03'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T02:18:55.730'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-23422'
references:
  - url: 'https://git.kernel.org/stable/c/00f42ace446f1e4bf84988f2281131f52cd32796'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/28fd8ac1d49389cb230d712116f54e27ebec11b8'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/74badb9c20b1a9c02a95c735c6d3cd6121679c93'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/7def51cb9fb8b8d5342443372b8cf28d8fbd7f3d'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/b5bababe7703a7322bc59b803ab1587887a2a5e4'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/c7becfe3e604d138bd53b8ac3111b2b3e8ec6b0e'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/fa4412cdc5178a48799bafcb8af28fd2fbf3d703'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-019113.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-082556.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
  - url: 'https://cert-portal.siemens.com/productcert/html/ssa-457936.html'
    label: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e
tags:
  - nvd
  - cve.org
epss: 0.00126
epssPercentile: 0.02297
ingestedAt: '2026-09-08T15:33:26.992Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

dpaa2-switch: Fix interrupt storm after receiving bad if_id in IRQ handler

Commit 31a7a0bbeb00 ("dpaa2-switch: add bounds check for if_id in IRQ
handler") introduces a range check for if_id to avoid an out-of-bounds
access. If an out-of-bounds if_id is detected, the interrupt status is
not cleared. This may result in an interrupt storm.

Clear the interrupt status after detecting an out-of-bounds if_id to avoid
the problem.

Found by an experimental AI code review agent at Google.

## Affected

- `linux_kernel >= 5.15.200, < 5.15.203`
- `linux_kernel >= 6.1.163, < 6.1.167`
- `linux_kernel >= 6.6.124, < 6.6.130`
- `linux_kernel >= 6.12.70, < 6.12.77`
- `linux_kernel >= 6.18.10, < 6.18.17`
- `linux_kernel >= 6.19.1, < 6.19.7`
- `linux_kernel = 6.19`
- `linux_kernel = 7.0`

## Remediation

Upgrade past the affected range:

- `linux_kernel 6.19.7`