CVE-2026-23445
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
03/04/2026
Last modified:
27/04/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
igc: fix page fault in XDP TX timestamps handling<br />
<br />
If an XDP application that requested TX timestamping is shutting down<br />
while the link of the interface in use is still up the following kernel<br />
splat is reported:<br />
<br />
[ 883.803618] [ T1554] BUG: unable to handle page fault for address: ffffcfb6200fd008<br />
...<br />
[ 883.803650] [ T1554] Call Trace:<br />
[ 883.803652] [ T1554] <br />
[ 883.803654] [ T1554] igc_ptp_tx_tstamp_event+0xdf/0x160 [igc]<br />
[ 883.803660] [ T1554] igc_tsync_interrupt+0x2d5/0x300 [igc]<br />
...<br />
<br />
During shutdown of the TX ring the xsk_meta pointers are left behind, so<br />
that the IRQ handler is trying to touch them.<br />
<br />
This issue is now being fixed by cleaning up the stale xsk meta data on<br />
TX shutdown. TX timestamps on other queues remain unaffected.
Impact
Base Score 3.x
7.80
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.10.1 (including) | 6.12.78 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.13 (including) | 6.18.20 (excluding) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (including) | 6.19.10 (excluding) |
| cpe:2.3:o:linux:linux_kernel:6.10:-:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc3:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc4:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc5:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc6:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.0:rc7:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page



