CVE-2026-64035

igc: set tx buffer type for SMD frames

State
Published
Severity
9.8 Critical
Published
Jul 19, 2026
Updated
Oct 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

igc: set tx buffer type for SMD frames

Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp

Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path.

Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.

Scores

CVSSScoreVectorSource
3.19.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • 5422570c0010bb968738f9256eb2bf83e79b4d63 to before 1f83545f432d106d5fc71d3997b2d382104ebcc4Affected
  • 5422570c0010bb968738f9256eb2bf83e79b4d63 to before 1c8587bd025244aa52061f5ceecbf5e68a1063d9Affected
  • 5422570c0010bb968738f9256eb2bf83e79b4d63 to before 5acc641e590e008caaed480ed9ffae47cf7ecbdfAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.