PT-2026-8218 · Intel+2 · Intel Ice+2
Published
2026-01-01
·
Updated
2026-05-19
·
CVE-2026-23210
CVSS v3.1
4.7
Medium
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.19.0-rc6+
Description
The Linux kernel contains a flaw related to the Intel Ice network driver and the Precision Time Protocol (PTP). A race condition can occur where PTP periodic work runs while a Virtual Switch Interface (VSI) is being rebuilt, leading to access of a NULL pointer in
vsi->rx rings. This can result in a kernel NULL pointer dereference and a system crash. The issue arises from the timing of canceling PTP work and queuing it again during the VSI rebuild process. The fix involves ensuring PTP work is only queued after the VSI rebuild is complete, using a helper function ice ptp queue work() to encapsulate the queuing logic and verify PTP support and readiness. The error manifests as a bug in the kernel, specifically in the ice ptp update cached phctime function.Recommendations
Update to a version of the Linux kernel newer than 6.19.0-rc6+.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Intel Ice
Linux Kernel
Rocky Linux