CVE-2026-23377

In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag_size field in XDP RxQ info is bpf_xdp_frags_increase_tail(). It clearly expects whole buff size instead of DMA write size. Different assumptions in ice driver configuration lead to negative tailroom. This allows to trigger kernel panic, when using XDP_ADJUST_TAIL_GROW_MULTI_BUFF xskxceiver test and changing packet size to 6912 and the requested offset to a huge value, e.g. XSK_UMEM__MAX_FRAME_SIZE * 100. Due to other quirks of the ZC configuration in ice, panic is not observed in ZC mode, but tailroom growing still fails when it should not. Use fill queue buffer truesize instead of DMA write size in XDP RxQ info. Fix ZC mode too by using the new helper.

• https://git.kernel.org/stable/c/b0f05100e8795aadd1c0606bae9caefbda070d63Patch
• https://git.kernel.org/stable/c/e142dc4ef0f451b7ef99d09aaa84e9389af629d7Patch

Published

Mar 25, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-23371In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23372In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-23373In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23374In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23375In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23376In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23378In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2026-23379In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23380In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23381In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23382In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2026-23383In the Linux kernel, the following vulnerability has been re…7.8