CVE-2026-23210

A flaw was found in the Linux kernel's ice network driver. A local attacker could exploit a race condition during the Virtual Station Interface (VSI) rebuild process. This flaw occurs when the Precision Time Protocol (PTP) periodic work attempts to access uninitialized memory, leading to a NULL pointer dereference. Successful exploitation results in a system crash, causing a Denial of Service (DoS).

This vulnerability is rated as having a Moderate impact because exploitation requires specific timing during interface reconfiguration on systems equipped with Intel 800 Series network hardware, limiting exposure to hosts utilizing the ice driver. Triggering the underlying reset sequence typically requires local administrative privileges or physical device events, preventing remote or unauthenticated threat actors from triggering the flaw. While a successful exploit leads to a kernel crash and resulting denial of service, it does not allow confidentiality compromise or unauthorized data modification.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

To mitigate this vulnerability, prevent the ice kernel module from loading. This can be achieved by creating a blacklist file for the module.

1. Create a file named /etc/modprobe.d/blacklist-ice.conf with the following content: blacklist ice

2. Regenerate the initramfs to ensure the blacklist is applied during boot: dracut -f -v

3. Reboot the system for the changes to take effect.

Warning: Blacklisting the ice module may impact network functionality if your system relies on network devices using this driver. Ensure this action is compatible with your system's requirements before proceeding.