CVE-2026-23377 is a Linux kernel networking issue in Intel’s ice driver, and the patch title itself gives away the core of the problem: the XDP receive queue’s fragment size was being derived from the DMA write length instead of the actual xdp.frame_sz. That sounds small, but in high-performance...
The Linux kernel patch for CVE-2024-42107 fixes a race in the Intel "ice" network driver where an external timestamp interrupt handler could process a timestamp after the driver had released its Precision Time Protocol (PTP) clock — a timing-of-check/time-of-use (TOCTOU) race that could produce...