Linux Kernel Google GVE Driver Interrupt Handling Vulnerability

Vulnerability

A vulnerability in the Google GVE driver of the Linux kernel allows interrupts to be enabled automatically before the NAPI (New API) context is fully prepared. This premature activation can lead to errors, such as interrupt requests being handled before the necessary network processing context is established. The issue arises because interrupts are enabled immediately upon request, creating a risk of interrupt-related failures during the network polling process.

Impact

The vulnerability can cause interrupt handling errors, disrupting the normal operation of network processing in the affected driver.

Reproduction

To reproduce this vulnerability, load a Google GVE network driver on a Linux kernel version that does not include the interrupt handling fix. The driver will enable interrupts before the NAPI context is ready, leading to errors in the interrupt handling process. This can be observed in the system logs, where the call trace will show a disruption in the NAPI polling function, indicating that an interrupt was processed before it was properly initialized.

Remediation

The vulnerability has been addressed in the Linux kernel. Users should upgrade to the latest version that includes this fix. Instructions for downloading the patched version can be found in the Linux kernel official repositories.

Added: Jan 23, 2026, 3:59 PM
Updated: Jan 23, 2026, 3:59 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.3
remediation
7.7
relevance
2.3
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.