CVE-2026-72409High· 7.5▾ Twilight

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR (mvne…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 15, 2026

Updated

Oct 16, 2026

CVSS

7.5

Vendor

Linux

Product

Linux

CWE

—

Depth score

41 · Moderate

EPSS

0.72% · p54

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

decided 2026-10-16

Exploitation: none
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 16.

0.7% → 0.7%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 62 days

Aug 15, 2026Published
Disclosed via NVD
Oct 16, 2026Record revised
Last analysed / modified upstream
Oct 16, 2026EPSS first tracked
0.7%

Linux #nvd #cve.org

Affected

Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < bf88cd3b649bc3e638f1e8a77649581852747a68
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 8c7a489aa71d2693752b2e794a68bf672d16c829
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 82c13027ed283b856017adee970dbfdffce5c6b8
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < be626ac1faadd49c2cead9f9cd06ba8752d81563
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 1cc312dc8bc78fa24c80d5bc193dbf5b57a99cc6
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < b84dd48f9da1eb132bdc06a944423cd5a1641ef1
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 5bdb33ff6e58bdc43632e98b30723eb65352d671
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < fd398d6480987e4c84fff0aaab6b9d6642a93343
Linux 4.4

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

net: mvneta: re-enable percpu interrupt on resume

On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR (mvneta_percpu_isr) calls disable_percpu_irq() to mask the MPIC per-CPU interrupt and schedules NAPI poll, which calls enable_percpu_irq() on completion to unmask.

If suspend occurs while NAPI poll is pending (between disable_percpu_irq in the ISR and enable_percpu_irq in poll completion), the interrupt is never re-enabled:

mvneta_percpu_isr: disable_percpu_irq() + napi_schedule() => MPIC masked, percpu_enabled cpumask bit cleared
NAPI poll does not complete before suspend proceeds (on PREEMPT_RT this is highly likely since softirqs run in ksoftirqd which gets frozen; on non-RT it can happen when softirq processing is deferred to ksoftirqd)
mvneta_stop_dev => napi_disable(): cancels the pending poll without executing the completion path
suspend_device_irqs => IRQCHIP_MASK_ON_SUSPEND: masks MPIC (already masked, but records IRQS_SUSPENDED)
Resume: mpic_resume checks irq_percpu_is_enabled() => false (bit was cleared in step 1) => skips unmask
mvneta_start_dev only restores device-level INTR_NEW_MASK, does not touch the MPIC per-CPU mask

Result: MPIC per-CPU interrupt stays masked permanently. The NIC generates interrupts (INTR_NEW_CAUSE != 0) but the CPU never receives them, causing complete loss of network connectivity.

Fix by calling on_each_cpu(mvneta_percpu_enable) in the resume path to unconditionally unmask the MPIC per-CPU interrupt regardless of pre-suspend state.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org

← Back to feed

CVE-2026-72409High· 7.5▾ Twilight

In the Linux kernel, the following vulnerability has been resolved: net: mvneta: re-enable percpu interrupt on resume On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR (mvne…

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score41/ 100 · Moderate

impact 41.3 · likelihood 0.1 · exploitation 0

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.

…

Published

Aug 15, 2026

Updated

Oct 16, 2026

CVSS

7.5

Vendor

Linux

Product

Linux

CWE

—

Depth score

41 · Moderate

EPSS

0.72% · p54

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

decided 2026-10-16

Exploitation: none
Automatable: yes
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

EPSS history

Exploit-prediction probability, daily snapshots since Oct 16.

0.7% → 0.7%

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

3 events · 62 days

Aug 15, 2026Published
Disclosed via NVD
Oct 16, 2026Record revised
Last analysed / modified upstream
Oct 16, 2026EPSS first tracked
0.7%

Linux #nvd #cve.org

Affected

Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < bf88cd3b649bc3e638f1e8a77649581852747a68
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 8c7a489aa71d2693752b2e794a68bf672d16c829
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 82c13027ed283b856017adee970dbfdffce5c6b8
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < be626ac1faadd49c2cead9f9cd06ba8752d81563
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 1cc312dc8bc78fa24c80d5bc193dbf5b57a99cc6
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < b84dd48f9da1eb132bdc06a944423cd5a1641ef1
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < 5bdb33ff6e58bdc43632e98b30723eb65352d671
Linux >= 12bb03b436dad56692e9a103ed26156156bef5d2 < fd398d6480987e4c84fff0aaab6b9d6642a93343
Linux 4.4

Full technical detail▾

Overview

In the Linux kernel, the following vulnerability has been resolved:

net: mvneta: re-enable percpu interrupt on resume

If suspend occurs while NAPI poll is pending (between disable_percpu_irq in the ISR and enable_percpu_irq in poll completion), the interrupt is never re-enabled:

mvneta_percpu_isr: disable_percpu_irq() + napi_schedule() => MPIC masked, percpu_enabled cpumask bit cleared
NAPI poll does not complete before suspend proceeds (on PREEMPT_RT this is highly likely since softirqs run in ksoftirqd which gets frozen; on non-RT it can happen when softirq processing is deferred to ksoftirqd)
mvneta_stop_dev => napi_disable(): cancels the pending poll without executing the completion path
suspend_device_irqs => IRQCHIP_MASK_ON_SUSPEND: masks MPIC (already masked, but records IRQS_SUSPENDED)
Resume: mpic_resume checks irq_percpu_is_enabled() => false (bit was cleared in step 1) => skips unmask
mvneta_start_dev only restores device-level INTR_NEW_MASK, does not touch the MPIC per-CPU mask

Result: MPIC per-CPU interrupt stays masked permanently. The NIC generates interrupts (INTR_NEW_CAUSE != 0) but the CPU never receives them, causing complete loss of network connectivity.

Fix by calling on_each_cpu(mvneta_percpu_enable) in the resume path to unconditionally unmask the MPIC per-CPU interrupt regardless of pre-suspend state.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org