xdp security

CVE-2026-23377 is a Linux kernel networking issue in Intel’s ice driver, and the patch title itself gives away the core of the problem: the XDP receive queue’s fragment size was being derived from the DMA write length instead of the actual xdp.frame_sz. That sounds small, but in high-performance...

A subtle driver-state bug in Broadcom’s bnxt Ethernet driver has been assigned CVE-2025-21682 after maintainers fixed a race and a NULL-pointer dereference that can lead to kernel crashes when XDP programs are detached and subsequent reconfiguration occurs. Systems that attach and remove XDP...