In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path. Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.
Fix
Patch, vendor advisory and mitigation references on NVD 3
- https://git.kernel.org/stable/c/1c8587bd025244aa52061f5ceecbf5e68a1063d9 Patch
- https://git.kernel.org/stable/c/1f83545f432d106d5fc71d3997b2d382104ebcc4 Patch
- https://git.kernel.org/stable/c/5acc641e590e008caaed480ed9ffae47cf7ecbdf Patch
Every line above is quoted from NVD, CISA, Microsoft, the vendor's own advisory or DISA; nothing is generated.
Change history 3
- CwesCWE-909 → CWE-909, CWE-665NVD modified 2026-10-19 21:17
- StatusAnalyzed → ModifiedNVD modified 2026-10-19 21:17
- First seenCVSS 9.8 · linuxNVD modified 2026-10-13 15:32
Affected (CPE criteria) 5
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*