Linux Kernel NAPI Poll Function Vulnerability Leading to Stability Issues

Vulnerability

A vulnerability in the Linux kernel's network processing can cause stability problems. When the NAPI (New API) weight is set to zero, it can lead to improper handling of network device polling. This issue arises because a zero weight allows the NAPI poll function to return too quickly, clearing a scheduled state and causing the NAPI to be re-polled unnecessarily. The problem was identified during stability tests, where the improper NAPI weight management led to a double addition in the processing backlog, causing warnings and potential performance degradation.

Impact

The vulnerability can cause network stability issues by improperly managing the NAPI polling process, leading to performance degradation and potential disruptions in network communication.

Reproduction

To reproduce this vulnerability, set the NAPI weight to zero using the sysctl command. Then, send a ping to the localhost. This will trigger the issue by causing the NAPI poll function to return too quickly, clearing the scheduled state and leading to a double addition in the processing backlog.

Remediation

The vulnerability has been addressed by ensuring that the NAPI weight is always set to a non-zero value.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
3.4
remediation
0.0
relevance
0.0
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.