SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-64035

CRITICAL · CVSS 9.8 EPSS 0.44%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability affects the Linux kernel's igc driver, where the initialization of the tx buffer for SMD frames does not properly set the buffer type, potentially leading to incorrect cleanup paths during TX completion. This flaw could allow for the exploitation of stale buffer types, resulting in critical system instability or data corruption. Organizations using Linux systems with the igc driver should prioritize patching this vulnerability to mitigate the risk of severe operational impacts.

CVE
CVE-2026-64035
Severity
CRITICAL
CVSS
9.8
EPSS
0.44%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: igc: set tx buffer type for SMD frames Sashiko pointed out that igc_fpe_init_smd_frame() initializes igc_tx_buffer fields for an SMD skb, but does not set the buffer type: https://sashiko.dev/#/patchset/20260415025226.114115-1-kohei%40enjuk.jp Since igc_tx_buffer entries are reused, a stale XDP or XSK type can remain and make TX completion use the wrong cleanup path. Set the buffer type to IGC_TX_BUFFER_TYPE_SKB.