CVE Database›Document archive›CVE-2026-23445

CVE-2026-23445

kernel: igc: fix page fault in XDP TX timestamps handling

Loading…

Severity

Moderate

Red Hat Product Security

5.5

CVSS 3.1

Review impact separately from score.

Published · April 3, 2026

Updated · October 29, 2026

Description

A flaw was found in the Linux kernel's igc network driver. When an XDP (eXpress Data Path) application that requests transmit (TX) timestamping is shut down while the network interface link remains active, the driver fails to properly clear stale xsk_meta pointers. This improper cleanup can lead to a page fault, potentially causing a system crash and resulting in a Denial of Service (DoS).

Statement

The fault happens in the interrupt path when TX timestamp metadata outlives ring teardown. Only hosts using Intel IGC with XDP TX timestamping hit this path. Normal networking without that feature combination is unaffected.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

To mitigate this issue, prevent the igc module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.

CVSS / CWE

CVSS 3.1 · 5.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CWE-459 · Incomplete Cleanup