CVE-2026-64035
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
In the Linux kernel, a vulnerability in the igc driver was found where the tx buffer type for SMD (Sashiko Mode Data) frames is not set. The igc_fpe_init_smd_frame() function initializes igc_tx_buffer fields but does not set the buffer type, which can cause TX completion to use the wrong cleanup path when buffers are reused, potentially affecting XDP or XSK transmissions.
Risk Assessment
The risk involves potential data corruption or incorrect network transmission behavior, which could lead to packet loss, errors in network applications, or system instability.
Recommendation
It is recommended to immediately update the Linux kernel to a version containing the fix that sets the buffer type to IGC_TX_BUFFER_TYPE_SKB in the igc_fpe_init_smd_frame() function.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path. Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.