{"id":"CVE-2026-99048","title":"gve: fix napi_disable deadlock when attempting to disable XSK pools","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix napi_disable deadlock when attempting to disable XSK pools\n\nWhen disabling XSK pools, GVE calls the unlocked versions of\nnapi_disable and napi_enable. However,…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 42935a61001927aa01db10b53b420efd37eaa99b","Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 3d377911ce81fd4e61af814e750d8e08879a5208","Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 0cb6939a4dfefa822007b7a71986e06bc4f61f54","Linux 6.16"],"published":"2026-10-23","updated":"2026-10-23","sourceUpdated":"2026-10-23T12:22:13.825Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99048","references":[{"url":"https://git.kernel.org/stable/c/42935a61001927aa01db10b53b420efd37eaa99b"},{"url":"https://git.kernel.org/stable/c/3d377911ce81fd4e61af814e750d8e08879a5208"},{"url":"https://git.kernel.org/stable/c/0cb6939a4dfefa822007b7a71986e06bc4f61f54"}],"tags":["cve.org"],"ingestedAt":"2026-10-23T13:24:55.526Z","slug":"CVE-2026-99048","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\ngve: fix napi_disable deadlock when attempting to disable XSK pools\n\nWhen disabling XSK pools, GVE calls the unlocked versions of\nnapi_disable and napi_enable. However, the netdev lock has already been\nacquired before ndo_bpf is called because GVE supports queue management\nops. Calling the unlocked versions of napi_disable/enable results in a\ndeadlock when attempting to disable XSK pools, as the thread attempts to\nre-acquire a lock it already holds.\n\nUpdate the NAPI calls to use the locked versions.\n\nThis issue was found in production.\n\n## Affected\n\n- `Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 42935a61001927aa01db10b53b420efd37eaa99b`\n- `Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 3d377911ce81fd4e61af814e750d8e08879a5208`\n- `Linux >= 606048cbd8346e616cfaee01b0143d072534136d < 0cb6939a4dfefa822007b7a71986e06bc4f61f54`\n- `Linux 6.16`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}