The Linux kernel contains a defect in the igc network driver that triggers a page fault during shutdown of an XDP application that has requested transmit timestamps. When the network interface link remains active, stale XDP socket metadata is accessed by the interrupt handler after the TX ring has been closed, which causes the kernel to crash with a BUG message and lose all service. The crash denies availability of the affected host; the description does not mention any direct compromise of confidentiality or integrity, so the impact is limited to service interruption.

The bug exists in all Linux kernels that use the igc driver prior to the commit that applied the cleanup logic. The known affected CPE strings reference kernel 6.10 and all 7.0 release candidates up to rc7, so any deployment running a kernel in that range could be vulnerable. Systems that upgraded to a kernel after the patch are not affected.

With a CVSS score of 7.8 the flaw is considered high severity. The EPSS score of less than 1% suggests exploitation is unlikely at this time. The advisory notes that the bug requires the ability to shut down an XDP TX timestamping application while the interface link remains active, which in turn implies local or privileged user control; this is inferred from the described conditions. No public exploit is reported and the vulnerability is not listed in CISA KEV. The attack vector is therefore limited to environments where an attacker can execute code with sufficient privileges to trigger the shutdown.