igc driver logic bug causes network interface to become stuck in polling loop after an AF_XDP zero‑copy application is terminated abruptly. The bug prevents the scheduler bit from being cleared, leading to an infinite spin in napi_complete_done() and preventing the interface from being powered down. This results in a local denial of service that can exhaust kernel resources or disrupt network traffic. The vulnerability is limited to the Linux kernel igc driver; it does not provide remote code execution or privilege escalation but can lead to persistent interface denial.

The bug affects the Linux kernel, specifically the igc network driver used in many Linux distributions. No specific kernel versions are listed, so users should update to any kernel that includes the patch to the driver.

The EPSS score of < 1% indicates a very low exploitation probability, and the vulnerability is not listed in the CISA KEV catalog. The CVSS score of 5.5 indicates moderate severity for the denial of service impact. The lack of publicly reported exploits and the local nature of the vulnerability suggest a moderate to high risk of denial of service if an attacker can terminate an AF_XDP process. The fix removes the problematic napi_synchronize() call, relying on napi_disable() to terminate the poll loop. Applying the patch and updating the kernel mitigates the issue entirely.