Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

Linux Kernel: Out-of-Bounds Read in IRQ Handler

UBUNTU-CVE-2026-23180
Summary

A fix has been made to the Linux kernel's IRQ handler to prevent an out-of-bounds read when accessing a list of network ports. This affects Linux systems using the DPAA2 hardware. The fix ensures that the system checks if the port index is within valid bounds before accessing it, preventing potential data corruption or crashes.

What to do

No fix is available yet. Check with your software vendor for updates.

Affected software
VendorProductAffected versionsFix available
canonical linux-hwe-edge All versions
canonical linux-aws-5.0 All versions
canonical linux-aws-5.3 All versions
canonical linux-azure All versions
canonical linux-azure-5.3 All versions
canonical linux-azure-edge All versions
canonical linux-gcp All versions
canonical linux-gcp-5.3 All versions
canonical linux-gke-4.15 All versions
canonical linux-gke-5.4 All versions
canonical linux-gkeop-5.4 All versions
canonical linux-hwe All versions
canonical linux-hwe-edge All versions
canonical linux-oem All versions
canonical linux-oracle-5.0 All versions
canonical linux-oracle-5.3 All versions
canonical linux-aws-5.11 All versions
canonical linux-aws-5.13 All versions
canonical linux-aws-5.15 All versions
canonical linux-aws-5.8 All versions
canonical linux-azure-5.11 All versions
canonical linux-azure-5.13 All versions
canonical linux-azure-5.15 All versions
canonical linux-azure-5.8 All versions
canonical linux-azure-fde All versions
canonical linux-gcp-5.11 All versions
canonical linux-gcp-5.13 All versions
canonical linux-gcp-5.15 All versions
canonical linux-gcp-5.8 All versions
canonical linux-gke All versions
canonical linux-gke-5.15 All versions
canonical linux-gkeop All versions
canonical linux-gkeop-5.15 All versions
canonical linux-hwe-5.11 All versions
canonical linux-hwe-5.13 All versions
canonical linux-hwe-5.15 All versions
canonical linux-hwe-5.8 All versions
canonical linux-ibm-5.15 All versions
canonical linux-intel-5.13 All versions
canonical linux-intel-iotg-5.15 All versions
canonical linux-lowlatency-hwe-5.15 All versions
canonical linux-nvidia-tegra-5.15 All versions
canonical linux-oem-5.10 All versions
canonical linux-oem-5.13 All versions
canonical linux-oem-5.14 All versions
canonical linux-oem-5.6 All versions
canonical linux-oracle-5.11 All versions
canonical linux-oracle-5.13 All versions
canonical linux-oracle-5.15 All versions
canonical linux-oracle-5.8 All versions
canonical linux-raspi2 All versions
canonical linux-riscv All versions
canonical linux-riscv-5.11 All versions
canonical linux-riscv-5.15 All versions
canonical linux-riscv-5.8 All versions
canonical linux All versions
canonical linux-allwinner-5.19 All versions
canonical linux-aws All versions
canonical linux-aws-5.19 All versions
canonical linux-aws-6.2 All versions
canonical linux-aws-6.5 All versions
canonical linux-aws-6.8 All versions
canonical linux-azure All versions
canonical linux-azure-5.19 All versions
canonical linux-azure-6.2 All versions
canonical linux-azure-6.5 All versions
canonical linux-azure-6.8 All versions
canonical linux-azure-fde All versions
canonical linux-azure-fde-5.19 All versions
canonical linux-azure-fde-6.2 All versions
canonical linux-azure-fde-6.8 All versions
canonical linux-gcp All versions
canonical linux-gcp-5.19 All versions
canonical linux-gcp-6.2 All versions
canonical linux-gcp-6.5 All versions
canonical linux-gcp-6.8 All versions
canonical linux-gke All versions
canonical linux-gkeop All versions
canonical linux-hwe-5.19 All versions
canonical linux-hwe-6.2 All versions
canonical linux-hwe-6.5 All versions
canonical linux-hwe-6.8 All versions
canonical linux-ibm All versions
canonical linux-ibm-6.8 All versions
canonical linux-intel-iot-realtime All versions
canonical linux-intel-iotg All versions
canonical linux-kvm All versions
canonical linux-lowlatency All versions
canonical linux-lowlatency-hwe-5.19 All versions
canonical linux-lowlatency-hwe-6.2 All versions
canonical linux-lowlatency-hwe-6.5 All versions
canonical linux-lowlatency-hwe-6.8 All versions
canonical linux-nvidia All versions
canonical linux-nvidia-6.2 All versions
canonical linux-nvidia-6.5 All versions
canonical linux-nvidia-6.8 All versions
canonical linux-nvidia-tegra All versions
canonical linux-nvidia-tegra-igx All versions
canonical linux-oem-5.17 All versions
canonical linux-oem-6.0 All versions
canonical linux-oem-6.1 All versions
canonical linux-oem-6.5 All versions
canonical linux-oracle All versions
canonical linux-oracle-6.5 All versions
canonical linux-oracle-6.8 All versions
canonical linux-raspi All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
canonical linux-riscv-5.19 All versions
canonical linux-riscv-6.5 All versions
canonical linux-riscv-6.8 All versions
canonical linux-starfive-5.19 All versions
canonical linux-starfive-6.2 All versions
canonical linux-starfive-6.5 All versions
canonical linux-xilinx-zynqmp All versions
canonical linux-bluefield All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-intel-iot-realtime All versions
canonical linux-realtime All versions
canonical linux-realtime-6.8 All versions
canonical linux All versions
canonical linux-aws All versions
canonical linux-aws-6.14 All versions
canonical linux-aws-6.17 All versions
canonical linux-azure All versions
canonical linux-azure-6.11 All versions
canonical linux-azure-6.14 All versions
canonical linux-azure-6.17 All versions
canonical linux-azure-fde All versions
canonical linux-azure-fde-6.14 All versions
canonical linux-azure-fde-6.17 All versions
canonical linux-azure-nvidia All versions
canonical linux-azure-nvidia-6.14 All versions
canonical linux-gcp All versions
canonical linux-gcp-6.11 All versions
canonical linux-gcp-6.14 All versions
canonical linux-gcp-6.17 All versions
canonical linux-gke All versions
canonical linux-gkeop All versions
canonical linux-hwe-6.11 All versions
canonical linux-hwe-6.14 All versions
canonical linux-hwe-6.17 All versions
canonical linux-ibm All versions
canonical linux-lowlatency All versions
canonical linux-lowlatency-hwe-6.11 All versions
canonical linux-nvidia All versions
canonical linux-nvidia-6.11 All versions
canonical linux-nvidia-lowlatency All versions
canonical linux-nvidia-tegra All versions
canonical linux-oem-6.11 All versions
canonical linux-oem-6.14 All versions
canonical linux-oem-6.17 All versions
canonical linux-oem-6.8 All versions
canonical linux-oracle All versions
canonical linux-oracle-6.14 All versions
canonical linux-oracle-6.17 All versions
canonical linux-raspi All versions
canonical linux-raspi-realtime All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
canonical linux-riscv-6.14 All versions
canonical linux-riscv-6.17 All versions
canonical linux-xilinx All versions
canonical linux-aws-fips All versions
canonical linux-azure-fips All versions
canonical linux-fips All versions
canonical linux-gcp-fips All versions
canonical linux-raspi-realtime All versions
canonical linux-realtime All versions
canonical linux-realtime-6.14 All versions
canonical linux All versions
canonical linux-aws All versions
canonical linux-azure All versions
canonical linux-azure-fde All versions
canonical linux-gcp All versions
canonical linux-oracle All versions
canonical linux-raspi All versions
canonical linux-realtime All versions
canonical linux-riscv All versions
Original title
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware sta...
Original description
In the Linux kernel, the following vulnerability has been resolved: dpaa2-switch: add bounds check for if_id in IRQ handler The IRQ handler extracts if_id from the upper 16 bits of the hardware status register and uses it to index into ethsw->ports[] without validation. Since if_id can be any 16-bit value (0-65535) but the ports array is only allocated with sw_attr.num_ifs elements, this can lead to an out-of-bounds read potentially. Add a bounds check before accessing the array, consistent with the existing validation in dpaa2_switch_rx().
Published: 14 Feb 2026 · Updated: 13 Mar 2026 · First seen: 9 Mar 2026