CVE-2026-72409

Technical Description

In the Linux kernel, the following vulnerability has been resolved:

net: mvneta: re-enable percpu interrupt on resume

On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a percpu

IRQ disable/enable scheme for NAPI: the ISR (mvneta_percpu_isr) calls

disable_percpu_irq() to mask the MPIC per-CPU interrupt and schedules

NAPI poll, which calls enable_percpu_irq() on completion to unmask.

If suspend occurs while NAPI poll is pending (between

disable_percpu_irq in the ISR and enable_percpu_irq in poll

completion), the interrupt is never re-enabled:

1. mvneta_percpu_isr: disable_percpu_irq() + napi_schedule()

=> MPIC masked, percpu_enabled cpumask bit cleared

2. NAPI poll does not complete before suspend proceeds

(on PREEMPT_RT this is highly likely since softirqs run in

ksoftirqd which gets frozen; on non-RT it can happen when

softirq processing is deferred to ksoftirqd)

3. mvneta_stop_dev => napi_disable(): cancels the pending poll

without executing

Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

References