CVE-2026-23353

A flaw was found in the Linux kernel's ice network driver. When a local user performs an ethtool offline loopback test, the system can experience a kernel null pointer dereference. This occurs because the libeth library for the receive ring is not properly initialized. Successful exploitation of this vulnerability leads to a system crash, resulting in a Denial of Service (DoS).

This issue only affects systems with Intel ice network hardware and only triggers when an administrator explicitly runs the ethtool offline loopback self-test. Normal network operations are unaffected. The flaw requires local privileged access to run ethtool diagnostics, limiting the practical attack surface to administrative contexts.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.