Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag_size field in XDP RxQ info is bpf_xdp_frags_increase_tail(). It clearly expects whole buff size instead of DMA write size. Different assumptions in ice driver configuration lead to negative tailroom. This allows to trigger kernel panic, when using XDP_ADJUST_TAIL_GROW_MULTI_BUFF xskxceiver test and changing packet size to 6912 and the requested offset to a huge value, e.g. XSK_UMEM__MAX_FRAME_SIZE * 100. Due to other quirks of the ZC configuration in ice, panic is not observed in ZC mode, but tailroom growing still fails when it should not. Use fill queue buffer truesize instead of DMA write size in XDP RxQ info. Fix ZC mode too by using the new helper.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
| Date | Total | Labels |
|---|
| 2026-03-25 | 1 | Patch1 |
| 2026-03-26 | 1 | Patch1 |
| 2026-03-27 | 1 | Disclosure1 |
CVE-2026-23377 In the Linux kernel, the following vulnerability has been resolved: ice: change XDP RxQ frag_size from DMA write length to xdp.frame_sz The only user of frag_size f… https://www.cve.org/CVERecord?id=CVE-2026-23377
Post summary
CVE-2026-23377, affecting the Linux kernel's ice XDP driver, has been fixed by altering the frag_size calculation; a patch has been deployed and referenced via the CVE record.
⚡ New CVE Alert: CVE-2026-23377 🚨 Risk Level: Unknown 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-23377 #CVE-2026-23377 #CVE #CyberSecurity #InfoSec https://t.co/ZSahBKKJ4I
Post summary
The tweet announces a new CVE (CVE-2026-23377) with an unknown risk level and unspecified affected products, providing only a reference to the NVD entry.
🧊 Microsoft vibes, but Linux kernel: Intel ice used DMA write length instead of xdp.frame_sz. Small “math” mismatch, big packet-path chaos. Your NIC shouldn’t gamble. #WindowsForum https://windowsforum.com/threads/cve-2026-23377-fixing-ice-driver-xdp-frag-size-from-xdp-frame_sz.407465/ #XdpSecurity #IntelIceDriver #Cve202623377 #LinuxKernelNetworking https://t.co/SW6sEsBg4w
Post summary
The post highlights a Linux kernel vulnerability (CVE‑2026‑23377) in the Intel Ice NIC driver, explains a technical mismatch causing packet‑path issues, and points to a fix/patch discussion.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | linux | linux_kernel | - | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |
| OS | linux | linux_kernel | 7.0 | - | - |