{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.180-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.100-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.5-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  net: mvneta: re-enable percpu interrupt on resume  On Marvell MPIC platforms (Armada 370/XP/38x), mvneta uses a percpu IRQ disable/enable scheme for NAPI: the ISR (mvneta_percpu_isr) calls disable_percpu_irq() to mask the MPIC per-CPU interrupt and schedules NAPI poll, which calls enable_percpu_irq() on completion to unmask.  If suspend occurs while NAPI poll is pending (between disable_percpu_irq in the ISR and enable_percpu_irq in poll completion), the interrupt is never re-enabled:    1. mvneta_percpu_isr: disable_percpu_irq() + napi_schedule()      =\u003e MPIC masked, percpu_enabled cpumask bit cleared   2. NAPI poll does not complete before suspend proceeds      (on PREEMPT_RT this is highly likely since softirqs run in      ksoftirqd which gets frozen; on non-RT it can happen when      softirq processing is deferred to ksoftirqd)   3. mvneta_stop_dev =\u003e napi_disable(): cancels the pending poll      without executing the completion path   4. suspend_device_irqs =\u003e IRQCHIP_MASK_ON_SUSPEND: masks MPIC      (already masked, but records IRQS_SUSPENDED)   5. Resume: mpic_resume checks irq_percpu_is_enabled() =\u003e false      (bit was cleared in step 1) =\u003e skips unmask   6. mvneta_start_dev only restores device-level INTR_NEW_MASK,      does not touch the MPIC per-CPU mask  Result: MPIC per-CPU interrupt stays masked permanently. The NIC generates interrupts (INTR_NEW_CAUSE != 0) but the CPU never receives them, causing complete loss of network connectivity.  Fix by calling on_each_cpu(mvneta_percpu_enable) in the resume path to unconditionally unmask the MPIC per-CPU interrupt regardless of pre-suspend state.",
  "id": "DEBIAN-CVE-2026-72409",
  "modified": "2026-09-14T16:47:32.429111367Z",
  "published": "2026-08-15T06:22:14.493Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-72409"
    }
  ],
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
      "type": "CVSS_V3"
    }
  ],
  "upstream": [
    "CVE-2026-72409"
  ]
}