CVE-2026-99048
kernel: gve: fix napi_disable deadlock when attempting to disable XSK pools
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 23, 2026
Updated · October 29, 2026
Description
A flaw was found in the Google Virtual Ethernet (gve) driver in the Linux kernel. When disabling network buffer pools (XSK pools), the driver attempts to re-acquire a network device lock that is already held. A local user with administrative privileges could trigger this flaw during queue management operations, resulting in a kernel deadlock and a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-764 · Multiple Locks of a Critical Resource