Linux CVE-2026-23422

The vulnerability exists in the dpaa2-switch driver's interrupt request handler, which processes interface identifiers (if_id) from hardware events. A prior commit added bounds validation to prevent out-of-bounds memory access when if_id exceeds the valid range; however, the fix neglected to clear the interrupt status register when the bounds check fails. In hardware interrupt contexts, failure to acknowledge or clear the interrupt status causes the hardware to re-assert the interrupt immediately, creating an interrupt storm loop. The underlying technology involves the NXP Data Path Acceleration Architecture v2 (DPAA2) Ethernet switch, which uses interrupt-driven event signaling. CWE classification suggests buffer overflow or bounds-checking logic error, though the root cause is more precisely an incomplete interrupt handler state management following input validation.