CVE-2026-80715: igc: remove napi_synchronize() in igc_down()
In the Linux kernel, the following vulnerability has been resolved:
igc: remove napisynchronize() in igcdown()
When an AFXDP zero-copy application is killed abruptly, the XSK pool is torn down but NAPI keeps polling. igccleanrxirqzc() then returns the full budget on every poll, so napicompletedone() never clears NAPISTATESCHED.
igcdown() calls napisynchronize() before napidisable(), so it spins forever waiting for that bit and the interface never goes down. Drop the napisynchronize() and let napidisable() do the job -- it sets NAPISTATEDISABLE, which forces the stuck poll to complete. Reorder it ahead of igcsetqueuenapi() so the NAPI mapping is cleared only after polling has stopped, matching the recent igb fix b1e067240379.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
The issue affects Linux systems using the igc driver with an AF_XDP zero-copy application. It is triggered when that application is killed abruptly and its XSK pool is torn down while NAPI continues polling.
What symptom would indicate the system is affected?
The network interface cannot be brought down. The igc_down() path can spin indefinitely waiting for the NAPI scheduling state to clear.