CVE-2026-23445
kernel: igc: fix page fault in XDP TX timestamps handling
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · April 3, 2026
Updated · October 29, 2026
Description
A flaw was found in the Linux kernel's igc network driver. When an XDP (eXpress Data Path) application that requests transmit (TX) timestamping is shut down while the network interface link remains active, the driver fails to properly clear stale xsk_meta pointers. This improper cleanup can lead to a page fault, potentially causing a system crash and resulting in a Denial of Service (DoS).
Statement
The fault happens in the interrupt path when TX timestamp metadata outlives ring teardown. Only hosts using Intel IGC with XDP TX timestamping hit this path. Normal networking without that feature combination is unaffected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
To mitigate this issue, prevent the igc module from being loaded. See https://access.redhat.com/solutions/41278 for instructions.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-459 · Incomplete Cleanup