CVE-2026-23104

A use-after-free vulnerability was found in the Intel ice network driver in the Linux kernel. When devlink reload is used followed by driver removal, the hwmon sysfs attributes are left orphaned with dangling pointers to freed module memory. System monitoring tools like sadc that periodically read hwmon attributes trigger page faults when accessing the freed memory, causing recurring kernel crashes approximately every 10 minutes.

This vulnerability affects systems with Intel Ice Lake network adapters that use devlink reload functionality. The issue manifests after driver unload when monitoring tools access orphaned hwmon sysfs files. While exploitation requires administrative devlink operations, the resulting periodic crashes significantly impact system stability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.