CVE-2026-99048 is a vulnerability in Linux Kernel
Published on October 23, 2026
gve: fix napi_disable deadlock when attempting to disable XSK pools
In the Linux kernel, the following vulnerability has been resolved:
gve: fix napi_disable deadlock when attempting to disable XSK pools
When disabling XSK pools, GVE calls the unlocked versions of
napi_disable and napi_enable. However, the netdev lock has already been
acquired before ndo_bpf is called because GVE supports queue management
ops. Calling the unlocked versions of napi_disable/enable results in a
deadlock when attempting to disable XSK pools, as the thread attempts to
re-acquire a lock it already holds.
Update the NAPI calls to use the locked versions.
This issue was found in production.
Products Associated with CVE-2026-99048
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 606048cbd8346e616cfaee01b0143d072534136d and below 42935a61001927aa01db10b53b420efd37eaa99b is affected.
- Version 606048cbd8346e616cfaee01b0143d072534136d and below 3d377911ce81fd4e61af814e750d8e08879a5208 is affected.
- Version 606048cbd8346e616cfaee01b0143d072534136d and below 0cb6939a4dfefa822007b7a71986e06bc4f61f54 is affected.
- Version 6.16 is affected.
- Before 6.16 is unaffected.
- Version 6.18.57, <= 6.18.* is unaffected.
- Version 7.2.11, <= 7.2.* is unaffected.
- Version 7.3, <= * is unaffected.