What is the CVSS score of EUVD-2026-15390?

EUVD-2026-15390 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Is there a patch available for EUVD-2026-15390?

Yes, a patch is available for EUVD-2026-15390. Update the affected software to the latest version immediately.

Linux EUVD-2026-15390

| CVE-2026-23389 MEDIUM

Memory Leak (CWE-401)

2026-03-25 Linux

GHSA-4r22-fj9f-vv8r

Information Disclosure Linux

5.5

CVSS 3.1 · NVD

View

Vulnerability Assessment

Weakness	CWE CWE-401 ASVS 5.0 V15 - Secure Coding and Architecture Resource cleanup, leak prevention
Impact	While a CVSS score and vector are not provided, the underlying memory leak represents a moderate-to-low real-world risk despite potentially concerning classification tags. Memory leaks in kernel drivers typically require repeated triggering to cause measurable impact (denial of service through memory exhaustion), and ice_set_ringparam() is invoked only during explicit ring parameter configuration via ethtool, limiting exposure surface. The vulnerability is not listed in CISA KEV (no active exploitation reported), no public proof-of-concept exists, and EPSS probability cannot be assessed without a score. The technical impact is confidentiality/integrity neutral but availability-adjacent only under sustained exploitation. However, the presence of two stable kernel commits (44ba32a892b72de3faa04b8cfb1f2f1418fdd580 and fe868b499d16f55bbeea89992edb98043c9de416) indicates the Linux kernel maintainers assessed this as worthy of quick remediation, suggesting elevated concern within the kernel community despite low real-world exploitation likelihood.
Exploit ScenarioDerived	An attacker with local access to a Linux system (low privilege sufficient to run ethtool) could trigger the ice_set_ringparam() function repeatedly by issuing ethtool commands to modify ring buffer sizes on an ice-driver-based network adapter, causing small amounts of kernel memory (xdp_rings and tx_rings allocations) to leak with each failed configuration attempt. Over hours or days, depending on system memory capacity, these accumulated leaks degrade performance and eventually trigger out-of-memory conditions, crashing services or the kernel itself. However, this attack requires local access and visible administrative activity, making it impractical for remote exploitation or stealthy attacks.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.0% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 25, 2026

A memory leak vulnerability exists in the Linux kernel's ice driver in the ice_set_ringparam() function, where dynamically allocated tx_rings and xdp_rings are not properly freed when subsequent rx_rings allocation or setup fails. This affects all Linux kernel versions with the vulnerable ice driver code path, and while memory leaks typically enable denial of service through resource exhaustion rather than direct code execution, the impact depends on exploitation frequency and system memory constraints. No active exploitation or proof-of-concept has been publicly disclosed; the vulnerability was discovered through static analysis and code review rather than in-the-wild detection.

RemediationAI

Apply the official Linux kernel patch by upgrading to a kernel version that includes commit 44ba32a892b72de3faa04b8cfb1f2f1418fdd580 or the stable branch commit fe868b499d16f55bbeea89992edb98043c9de416, available via https://git.kernel.org/stable/. Alternatively, contact your distribution vendor (Red Hat, Canonical, SUSE, etc.) for a patched kernel package for your specific release. For systems unable to patch immediately, mitigate by restricting access to ethtool ring parameter configuration commands via filesystem permissions or SELinux policies to prevent unprivileged users from triggering the allocation path repeatedly. Monitor system memory usage on affected systems for signs of unexplained memory consumption if ring parameter reconfigurations are frequent.

Affected VersionsENISA

Linux 4.17

Linux fcea6f3da546b93050f3534aadea7bd96c1d7349 <fe868b499d16f55bbeea89992edb98043c9de416

Linux patch: 0

Linux fcea6f3da546b93050f3534aadea7bd96c1d7349 <44ba32a892b72de3faa04b8cfb1f2f1418fdd580

Linux patch: 6.19.7

Linux patch: 7.0-rc3

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability resides in the Intel ice Ethernet driver (affected via CPE cpe:2.3:a:linux:linux), specifically in the ring parameter configuration function that manages transmit rings (tx_rings), receive rings (rx_rings), and XDP (eXpress Data Path) rings. The root cause is a control flow issue classified under improper resource cleanup (related to CWE-401 Missing Release of Memory after Effective Lifetime), where multiple allocation paths lack proper error handling and rollback logic. When ice_set_ringparam() attempts to allocate tx_rings and xdp_rings sequentially followed by rx_rings, a failure in rx_rings allocation or during rx ring setup loops causes execution to jump to error labels that do not free all previously allocated resources, leaving xdp_rings orphaned in memory. The vulnerability requires intimate knowledge of Linux kernel ring buffer management and affects any system using the ice driver for network interface configuration.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

SUSE MEDIUM

Red Hat 5.5 LOW

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVSS changed

Apr 24, 2026 - 18:52 NVD

5.5 (MEDIUM)

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

CVE Published

Mar 25, 2026 - 10:28 nvd

N/A

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix memory leak in ice_set_ringparam()

In ice_set_ringparam, tx_rings and xdp_rings are allocated before rx_rings. If the allocation of rx_rings fails, the code jumps to the done label leaking both tx_rings and xdp_rings. Furthermore, if the setup of an individual Rx ring fails during the loop, the code jumps to the free_tx label which releases tx_rings but leaks xdp_rings.

Fix this by introducing a free_xdp label and updating the error paths to ensure both xdp_rings and tx_rings are properly freed if rx_rings allocation or setup fails.

Compile tested only. Issue found using a prototype static analysis tool and code review.

Threat Intelligence Overview

EPSS Score

0.0%

Top 95% exploitable

Threat Intel

1 source

Data Quality

7 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS CISA Vendor

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.0%

Patch available Yes

Active threat Yes

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Defer

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

Human Impact· derived

Medium

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +28

PoC: 0

Weaponized: 0

Threat intel: +10

Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Related Vulnerabilities in ice Driver Memory and XDP Issues

View all 2

CVE-2026-23377 MEDIUM

5.5

Same weakness CWE-401 – Memory Leak

View all

CVE-2020-13934 HIGH

7.5

CVE-2016-4232 HIGH POC

7.5

CVE-2025-25469 HIGH POC

8.8

CVE-2024-25450 HIGH POC

8.8

CVE-2023-33718 HIGH POC

8.8

CVE-2019-6128 HIGH POC

8.8

CVE-2026-67183 HIGH POC

8.7

CVE-2023-34451 HIGH POC

8.2

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2025-68613 HIGH POC

8.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

Vendor StatusVendor

Debian

linux

Release	Status	Fixed Version	Urgency
bullseye	vulnerable	5.10.223-1	-
bullseye (security)	vulnerable	5.10.251-1	-
bookworm	vulnerable	6.1.159-1	-
bookworm (security)	vulnerable	6.1.164-1	-
trixie	vulnerable	6.12.73-1	-
trixie (security)	vulnerable	6.12.74-2	-
forky, sid	fixed	6.19.8-1	-
(unstable)	fixed	6.19.8-1	-

SUSE

Severity: Medium

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise Desktop 15 SP7	Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7	Fixed
SUSE Linux Enterprise High Availability Extension 15 SP7	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP7	Fixed

Threat IntelligenceMISP

CISA Advisories

ICSA-26-295-16

Sources: CISA (public domain)

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-23389 ADVISORY https://ubuntu.com/security/notices/USN-8567-1 ADVISORY https://vuldb.com/vuln/353107 REF https://cert-portal.siemens.com/productcert/html/ssa-784472.html REF https://git.kernel.org/stable/c/44ba32a892b72de3faa04b8cfb1f2f1418fdd580 REF https://git.kernel.org/stable/c/63dc317dfcd3faffd082c2bf3080f9ad070273da REF https://git.kernel.org/stable/c/b23282218eca27b710111460b4964c8a456c6c44 REF https://git.kernel.org/stable/c/bddf04e3822e4fa38691433dd0750420d49a0dd6 REF https://git.kernel.org/stable/c/e0c211a0c26159058303712d6b4fbd1c88835e6d REF https://git.kernel.org/stable/c/fe868b499d16f55bbeea89992edb98043c9de416

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back