CVE-2026-23343

A flaw was found in the Linux kernel's eXpress Data Path (XDP) component. This vulnerability arises from incorrect buffer size calculations in certain ethernet drivers, such as ixgbevf, which can lead to memory corruption. An attacker could exploit this flaw to cause system instability, potentially resulting in a denial of service.

This flaw affects XDP usage with certain ethernet drivers (e.g., ixgbevf) that incorrectly report DMA write size as frag_size. When tailroom calculation becomes negative due to page offsets, the unsigned int wraparound causes bpf_xdp_frags_increase_tail() to allow excessive tail growth, leading to memory corruption. Affects systems using XDP with affected drivers.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.