CVE-2026-80715

A LOW impact local denial of service flaw was found in the Linux kernel's igc network driver as shipped in Red Hat Enterprise Linux and Red Hat In-Vehicle OS. When an AF_XDP zero-copy application is killed abruptly, the XSK pool is torn down while NAPI keeps polling, so igc_clean_rx_irq_zc() returns its full budget on every poll and napi_complete_done() never clears NAPI_STATE_SCHED. Because igc_down() calls napi_synchronize() before napi_disable(), it spins forever waiting for that bit and the network interface never goes down. A local attacker with the privileges required to run an AF_XDP zero-copy application (CAP_NET_RAW) could exploit this by abruptly terminating such an application, leaving the igc-backed interface hung and unable to be shut down cleanly, causing a local denial of service. There is no impact on confidentiality or integrity, and the issue is not network-reachable. Red Hat Enterprise Linux 8 (from 8.6 onward), 9, and 10 (kernel and kernel-rt) and Red Hat In-Vehicle OS are affected because they contain the igc AF_XDP zero-copy receive support; Red Hat Enterprise Linux 6, 7, and 8.4 are not affected because the vulnerable code is not present. Although the Red Hat CVSS:3.1 base score is 5.5 (Moderate), Red Hat rates the overall impact as LOW because exploitation requires local privileged access and the consequence is limited to the availability of a single network interface. Fixes for the affected streams are currently deferred to a future release given the low impact; the residual risk is a local denial of service confined to affected igc interfaces.