Linux hwe edge: In the Linux kernel, the following vulnerability has been resolved: net/ionic: avoid OOB TX partner lookup for hwstamp RXQ The dedicated hardware… (CVE-2026-80779)

The Linux kernel net/ionic driver had a vulnerability where the dedicated hardware timestamp RX queue was allocated with an index equal to lif->ionic->nrxqs_per_lif, which is outside the bounds of the normal txqcqs array. Using this index to set rxq->partner caused an out-of-bounds read and write through the derived pointer. The vulnerability was resolved by linking RX/TX partners only for normal queue-pair indexes, leaving the hwstamp RX queue unpaired, and ensuring the XDP_TX path aborts cleanly if an RX queue lacks a TX partner.

This vulnerability could cause out-of-bounds memory access in the kernel, potentially leading to memory corruption or system instability. However, no known exploits in the wild have been reported. The impact is limited to the net/ionic driver in the Linux kernel and affects hardware timestamp RX queue processing.

A fix has been implemented in the Linux kernel to address this vulnerability. Users should apply the official kernel updates that include this patch. Since no cloud service is involved, remediation depends on updating the affected Linux kernel versions once the patch is released. Patch status is not explicitly confirmed in the provided data; users should consult the vendor or kernel maintainers for the official patch availability and apply updates accordingly.