linux kernel networking

CVE-2026-31422 is a classic example of how a small assumption in the Linux networking stack can turn into a kernel crash. The flaw lives in net/sched/cls_flow, where flow_change() can dereference block->q to derive a default baseclass even when the filter is attached to a shared block that...

CVE-2026-23377 is a Linux kernel networking issue in Intel’s ice driver, and the patch title itself gives away the core of the problem: the XDP receive queue’s fragment size was being derived from the DMA write length instead of the actual xdp.frame_sz. That sounds small, but in high-performance...