CVE-2026-53009: ice: fix double-free of tx_buf skb

Published Jun 24, 2026
·
Updated

ice: fix double-free of txbuf skb

Affected Software

6 affected components
Linux Kernel
Linux Linux kernel>=4.17<7.0.10
redhat Enterprise Linux=7.0
redhat Enterprise Linux=8.0
redhat Enterprise Linux=9.0
redhat Enterprise Linux=10.0

Remediation

Recommended actions to resolve this vulnerability, in priority order.

  1. Configuration

    Apply the fix for the ice: fix double-free of tx_buf skb issue by resetting the tx_buf type to ICE_TX_BUF_EMPTY in the error path when the linearization error path is hit, so that the skb is not freed a second time by ice_unmap_and_free_tx_buf() after the first free in ice_xmit_frame_ring().

    Linux kernel (ice driver) tx_buf type = ICE_TX_BUF_EMPTY
  2. Configuration

    Move the initialization of 'first' up so it is already valid when the code reaches the linearization error path (ensuring correct error handling in the ice driver).

    Linux kernel (ice driver) initialization of 'first' = moved up

Event History

Jun 24, 2026
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
DescriptionSeverity
Data Sourced
via NVD·05:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Data Sourced
via Red Hat·06:09 PM
DescriptionSeverityAffected Software
Jun 27, 2026
Data Sourced
via Microsoft·08:11 AM
DescriptionSeverityWeakness

Frequently Asked Questions

1

What is the severity of CVE-2026-53009?

CVE-2026-53009 has a risk rating of 28, indicating a moderate severity level.

2

How do I fix CVE-2026-53009?

To fix CVE-2026-53009, ensure that you update the Intel ice driver in the Linux kernel to the latest version where the vulnerability is patched.

3

What systems are affected by CVE-2026-53009?

CVE-2026-53009 affects systems utilizing the Intel ice driver in the Linux kernel.

4

What does CVE-2026-53009 affect in the Linux kernel?

CVE-2026-53009 addresses a double-free issue of tx_buf skb during error handling in the ice driver.

5

Is CVE-2026-53009 exploitable?

While specific exploitation details may vary, CVE-2026-53009 can lead to potential memory corruption issues if not mitigated.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203