PT-2026-27742 · Linux · Linux Kernel

Published 2026-01-01 · Updated 2026-04-20 · CVE-2026-23377

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel’s ice driver related to XDP (eXpress Data Path) Receive Queue (RxQ) handling. The frag size field in XDP RxQ info incorrectly used the DMA write size instead of the expected xdp.frame sz. This discrepancy could lead to negative tailroom calculations, potentially triggering a kernel panic under specific conditions, such as when using the XDP ADJUST TAIL GROW MULTI BUFF xskxceiver test with a large packet size and offset. The fix involves using the fill queue buffer truesize instead of the DMA write size in XDP RxQ info, and applying the correction to ZC mode as well.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2026-23377

Affected Products

Linux Kernel

References · 17

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/23xxx/CVE-2026-23377.json · Exploit
• https://security-tracker.debian.org/tracker/CVE-2026-23377 · Vendor Advisory
• https://git.kernel.org/stable/c/b0f05100e8795aadd1c0606bae9caefbda070d63 · Patch
• https://osv.dev/vulnerability/CVE-2026-23377 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-23377 · Security Note
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-23377 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2026-23377 · Security Note
• https://osv.dev/vulnerability/ROOT-OS-UBUNTU-2404-CVE-2026-23377 · Vendor Advisory
• https://git.kernel.org/stable/c/e142dc4ef0f451b7ef99d09aaa84e9389af629d7 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-23377 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-23377 · Vendor Advisory
• https://osv.dev/vulnerability/BELL-CVE-2026-23377 · Vendor Advisory
• https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git · Note
• https://twitter.com/CVEarity/status/2037565468924657753 · Twitter Post
• https://docs.bell-sw.com/security/cves/CVE-2026-23377 · Note