Medium 5.5Published Mar 25, 2026

CVE-2026-23313i40e: Fix preempt count leak in napi poll tracepoint

Updated under an hour ago (Oct 26, 2026, 4:10 PM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: i40e: Fix preempt count leak in napi poll tracepoint Using get_cpu() in the tracepoint assignment causes an obvious preempt count leak because nothing invokes put_cpu() to undo it: softirq: huh, entered softirq 3 NET_RX with preempt_count 00000100, exited with 00000101? This clearly has seen a lot of testing in the last 3+ years... Use smp_processor_id() instead.

CVSS: 5.5 MEDIUM (v3.1, NVD)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Weakness (CWE): Not given
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Analyzed
Record last updated: May 11, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from 6d4d584a7ea8fc8d2be77545cb503118c193738a before fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7; from 6d4d584a7ea8fc8d2be77545cb503118c193738a before b7e91827e1cf89cd34ad11dc8f8c010b70ab786e; from 6d4d584a7ea8fc8d2be77545cb503118c193738a before 9e0f091821571f0da387462803ee42f0bb157582; from 6d4d584a7ea8fc8d2be77545cb503118c193738a before dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f; 6d4d584a7ea8fc8d2be77545cb503118c193738a builds before 4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9	CNA record
linux linux_kernel linux:linux_kernel	from 6.2 before 6.6.136; from 6.7 before 6.12.77; from 6.13 before 6.18.17; from 6.19 before 6.19.7; 7.0; 7.0	NVD

References

References

https://git.kernel.org/stable/c/fa5d5baf67f619c7aa70697a194b5a9edd9f5bb7	patch
https://git.kernel.org/stable/c/b7e91827e1cf89cd34ad11dc8f8c010b70ab786e	patch
https://git.kernel.org/stable/c/9e0f091821571f0da387462803ee42f0bb157582	patch
https://git.kernel.org/stable/c/dca4ea596a3b0a1b82bc1d9f3e4d88bd9ad9561f	patch
https://git.kernel.org/stable/c/4b3d54a85bd37ebf2d9836f0d0de775c0ff21af9	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.