Bug 2439857 (CVE-2026-23122)

Summary:	CVE-2026-23122 kernel: igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue
Product:	[Other] Security Response	Reporter:	OSIDB Bzimport <bzimport>
Component:	vulnerability	Assignee:	Product Security DevOps Team <prodsec-dev>
Status:	NEW ---	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	Keywords:	Security
Target Milestone:	---
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	---
Doc Text:	A flaw was found in the Linux kernel's igc (Intel I225/I226) Ethernet driver. The TX packet buffer configuration of 7KB per queue for Time-Sensitive Networking (TSN) mode can cause TX unit hangs under heavy timestamping workloads. This occurs because the buffer size exceeds the hardware's recommended configuration, leading to network interface unavailability.	Story Points:	---
Clone Of:		Environment:
Last Closed:		Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description OSIDB Bzimport 2026-02-14 16:02:00 UTC

In the Linux kernel, the following vulnerability has been resolved:

igc: Reduce TSN TX packet buffer from 7KB to 5KB per queue

The previous 7 KB per queue caused TX unit hangs under heavy
timestamping load. Reducing to 5 KB avoids these hangs and matches
the TSN recommendation in I225/I226 SW User Manual Section 7.5.4.

The 8 KB "freed" by this change is currently unused. This reduction
is not expected to impact throughput, as the i226 is PCIe-limited
for small TSN packets rather than TX-buffer-limited.

Comment 1 Alexander B 2026-02-16 10:07:11 UTC

Upstream advisory:
https://lore.kernel.org/linux-cve-announce/2026021408-CVE-2026-23122-77b9@gregkh/T