PT-2026-27718 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-03-25 · CVE-2026-23353

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.19.0-0.rc7.260128g1f97d9dcf5364.49.eln154.x86 64

Description The Linux kernel contains a flaw within the ice network driver related to the ethtool offline loopback test. Following the conversion to page pool allocation, the test causes a kernel NULL pointer dereference, leading to a system crash. The issue arises because the receive ring for ICE Virtual Switch Interface (VSI) loopback tests was not properly initialized for libeth, resulting in an attempt to access an uninitialized memory location.

Recommendations Update the Linux kernel to version 6.19.0-0.rc7.260128g1f97d9dcf5364.49.eln154.x86 64 or a later version that includes the fix.

Exploit

Fix

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

CVE-2026-23353

Affected Products

Linux Kernel

References · 13

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23353.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23353 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-23353 · Vendor Advisory
• https://git.kernel.org/stable/c/85c98b81849e4724ae99005a6cccd33cab9cfd18 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-23353 · Security Note
• https://git.kernel.org/stable/c/a9c354e656597aededa027d63d2ff0973f6b033f · Patch
• https://ubuntu.com/security/CVE-2026-23353 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23353 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23353 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23353 · Security Note
• https://git.kernel.org/linus/a9c354e656597aededa027d63d2ff0973f6b033f · Note
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEnew/status/2036763494092091664 · Twitter Post