net: ibm: emac: mal: fix potential system hang in mal_remove()

Summary

In the Linux kernel, the following vulnerability has been resolved: net: ibm: emac: mal: fix potential system hang in mal_remove() napi_disable() is not idempotent and calling it on an already-disabled or unenabled NAPI context will cause the kernel to spin indefinitely waiting for the NAPI_STATE_SCHED bit to clear. In mal_remove(), napi_disable() is called unconditionally. If no MACs were registered, NAPI was never enabled. Also, if they were registered but subsequently unregistered, NAPI was already disabled in mal_unregister_commac(). In either case, calling napi_disable() causes the kernel to hang upon module removal. Fix this by only calling napi_disable() in mal_remove() if the commac list is not empty (which implies NAPI is enabled).

Timeline

1. Sep 24, 2026, 4:03 PM UTCCVE published
2. Oct 3, 2026, 10:58 AM UTCRecord last updated

Affected versions

• Linux Linux

  From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in 9c1c814a662d9c81959eba591bb52b24639390f2; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in 34c4cae51718d6f393415e01c61314c1bde02f2e; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in 62126e73e230cf4bd6c27cf201949c4290af84a1; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in f0399b3e212741bc5a64b8399d6266c4a150bdfe; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in f6c1aad9b35fa083f48ce0c5926204891d82e089; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in c4cb9a728df66c46067b26263f5beb633aae4087; From b3e441c6ed8655a42e7b4da1b6dc7939f259d9c9 · fixed in 7c5d41f87f079990bf241359e3c1332d8d10fe87

• Linux Linux

  2.6.24

• KernelLinux

  From 2.6.24 · fixed in 5.10.271; From 5.11.0 · fixed in 5.15.222; From 5.16.0 · fixed in 6.1.189; From 6.2.0 · fixed in 6.6.158; From 6.7.0 · fixed in 6.12.111; From 6.13.0 · fixed in 6.18.53

References 7