---
id: "CVE-2026-99048"
kind: "vulnerability"
aliases: ["CVE-2026-99048"]
title: "Linux kernel gve driver: deadlock when disabling XSK pools"
severity: "unknown"
cvss: null
epss: 0.00206
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["af-xdp", "google-compute-engine", "gve", "infrastructure", "linux-kernel"]
not_affected_if: ["no-gve-driver", "no-xsk-pools"]
published_at: "2026-10-23T13:17:28+00:00"
first_seen_at: "2026-10-23T21:57:33+00:00"
updated_at: "2026-10-25T12:38:50+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-99048", "first_seen_at": "2026-10-23T21:57:33+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2026-99048", "first_seen_at": "2026-10-25T12:38:50+00:00"}]
---

# Linux kernel gve driver: deadlock when disabling XSK pools

The gve Google Virtual NIC driver calls unlocked NAPI disable and enable functions while the netdev lock is already held, so disabling XSK pools deadlocks the thread. The impact described is a hang or denial of service on affected systems, not code execution.

_Summary, check and fix written by a model from the sources; labelled as such._

## Timeline

- 2026-10-23T21:57:33+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-99048
- 2026-10-25T12:38:50+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2026-99048

## From the sources

In the Linux kernel, the following vulnerability has been resolved:

gve: fix napi_disable deadlock when attempting to disable XSK pools

When disabling XSK pools, GVE calls the unlocked versions of
napi_disable and napi_enable. However, the netdev lock has already been
acquired before ndo_bpf is called because GVE supports queue management
ops. Calling the unlocked versions of napi_disable/enable results in a
deadlock when attempting to disable XSK pools, as the thread attempts to
re-acquire a lock it already holds.

Update the NAPI calls to use the locked versions.

This issue was found in production.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_