In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-develUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-rt-64k-develUpgrade kernel-debug-develUpgrade rtlaUpgrade kernel-zfcpdump-develUpgrade kernel-toolsUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernelUpgrade rvUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-headersUpgrade kernel-rtUpgrade kernel-64k-debugUpgrade kernel-rt-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-64k-modulesUpgrade kernel-uki-virt-addonsUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-abi-stablelistsUpgrade kernel-modules-coreUpgrade libperfUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libsUpgrade kernel-coreUpgrade kernel-64k-debug-develUpgrade perfUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debugUpgrade kernel-rt-kvmUpgrade kernel-rt-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debugUpgrade kernel-64k-modules-coreUpgrade kernel-develUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade python3-perfUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade rvUpgrade kernel-uki-virt-addonsUpgrade libperf-debuginfoUpgrade kernel-rtUpgrade kernel-modulesUpgrade perf-debuginfoUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdump-develUpgrade libperfUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-rt-debug-modules-coreUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade perfUpgrade python3-perfUpgrade kernel-uki-virtUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernelUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-zfcpdump-debuginfoUpgrade rtlaUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-cross-headersUpgrade kernel-debug-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debug-core | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-qcomUpgrade dtb-armUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade kernel-default-optionalUpgrade dtb-rockchipUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-64kb-develUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-default-vdsoUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade kernel-develUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-default-baseUpgrade dtb-amdUpgrade dlm-kmp-defaultUpgrade gfs2-kmp-64kbUpgrade dtb-renesasUpgrade dtb-marvellUpgrade reiserfs-kmp-defaultUpgrade dtb-hisiliconUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade kernel-macrosUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade kernel-kvmsmall-develUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-azureUpgrade ocfs2-kmp-rtUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-source-vanillaUpgrade kernel-rt-vdsoUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade dlm-kmp-64kbUpgrade kernel-symsUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kselftests-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade dtb-socionext | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-azureUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-realtimeUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-generic-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-generic-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-oracleUpgrade linux-image-oem-24.04a | Jul 31, 2025 | Jul 25, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub