CVE-2026-97434

A flaw was found in the Linux kernel's dpaa2-switch network driver. During device removal, network packet polling instances (NAPI) shared across switch ports can be deleted before they are properly disabled. A local user with administrative privileges could trigger this issue during device teardown, potentially leading to kernel instability and a denial of service (system crash).

A moderate-impact flaw was found in the Linux kernel's dpaa2-switch network driver in Red Hat Enterprise Linux 10 and RHIVOS 2. The NAPI (network packet polling) instances of a DPSW device are attached to the first switch port's net_device but are shared by all ports, and they are only disabled once the last port goes down. On the device removal (.remove()) path, each port is unregistered and freed one at a time, so the shared NAPI instances can be deleted while they are still enabled. A local user with the privileges required to trigger device teardown (such as removing or unbinding the device) could exploit this improper cleanup to cause kernel instability and a denial of service (system crash). The Red Hat severity is Moderate with a CVSS 3.1 score of 5.5 (AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). Red Hat Enterprise Linux 6, 7, 8, and 9 and OpenShift 4 and 5 releases are not affected because the vulnerable code is not present in those kernel trees.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.