PT-2026-27694 · Linux+1 · Linux Kernel+1

Published 2026-01-01 · Updated 2026-03-25 · CVE-2026-23329

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.17.0-rc7next-queue-3oct-01915-g06d79d51cf51

Description The libie fwlog deinit() function may be called during driver unload even when firmware logging was not properly initialized. This can lead to a kernel oops. The issue occurs when attempting to unload the ixgbe driver in recovery mode. The fix involves checking if firmware logging is supported before attempting to unroll.

Recommendations Update to version 6.17.0-rc7next-queue-3oct-01915-g06d79d51cf51 or a later version to resolve this issue.

Exploit

Fix

Related Identifiers

CVE-2026-23329

Affected Products

Linux Kernel

Ixgbe Driver

References · 14

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23329.json · Exploit
• https://git.kernel.org/stable/c/460c56ecbef57684aad1d6af525b89dcd3565701 · Patch
• https://cve.org/CVERecord?id=CVE-2026-23329 · Security Note
• https://osv.dev/vulnerability/CVE-2026-23329 · Vendor Advisory
• https://git.kernel.org/stable/c/0138d1cdb19fa49181a5aaba32427f1787cb3935 · Patch
• https://git.kernel.org/stable/c/636cc3bd12f499c74eaf5dc9a7d5b832f1bb24ed · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-23329 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23329 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23329 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23329 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23329 · Vendor Advisory
• https://git.kernel.org/linus/636cc3bd12f499c74eaf5dc9a7d5b832f1bb24ed · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2036763520109322646 · Twitter Post