CVE-2026-23445CWE-416

CVE-2026-23445

High · published April 3, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
2.3
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

igc: fix page fault in XDP TX timestamps handling

If an XDP application that requested TX timestamping is shutting down

while the link of the interface in use is still up the following kernel

splat is reported:

[ 883.803618] [ T1554] BUG: unable to handle page fault for address: ffffcfb6200fd008

...

[ 883.803650] [ T1554] Call Trace:

[ 883.803652] [ T1554] <TASK>

[ 883.803654] [ T1554] igc_ptp_tx_tstamp_event+0xdf/0x160 [igc]

[ 883.803660] [ T1554] igc_tsync_interrupt+0x2d5/0x300 [igc]

...

During shutdown of the TX ring the xsk_meta pointers are left behind, so

that the IRQ handler is trying to touch them.

This issue is now being fixed by cleaning up the stale xsk meta data on

TX shutdown. TX timestamps on other queues remain unaffected.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00129 · 2.3th percentile
Weakness
CWE-416 · Use After Free
Published
2026-04-03T20:16Z
Affected products (11)
ProductVersionsFixed in
linux/linux_kernel≥ 6.10.1, < 6.12.786.12.78
linux/linux_kernel≥ 6.13, < 6.18.206.18.20
linux/linux_kernel≥ 6.19, < 6.19.106.19.10
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (4)
EPSS history
Timeline
  • 03 APR 15:15Z
    igc: fix page fault in XDP TX timestamps handling
    cvelistv5