In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-abi-stablelistsUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headersUpgrade kernel-rt-modulesUpgrade kernel-toolsUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-debug-kvmUpgrade kernel-docUpgrade kernel-64kUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-develUpgrade kernelUpgrade libperfUpgrade kernel-64k-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-rt-64kUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-headersUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-modulesUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-develUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-develUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-coreUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-rt-64k-debug-modules-coreUpgrade perfUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-zfcpdumpUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade rtlaUpgrade kernel-rt-64k-develUpgrade kernel-rt-coreUpgrade kernel-debugUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-64k-develUpgrade kernel-core | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-extraUpgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-debug-uki-virtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-coreUpgrade kernel-debug-develUpgrade kernel-rt-develUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernelUpgrade kernel-zfcpdump-modulesUpgrade kernel-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade python3-perf-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-modulesUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debugUpgrade libperf-debuginfoUpgrade kernel-coreUpgrade rvUpgrade perf-debuginfoUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-develUpgrade kernel-rt-debuginfoUpgrade python3-perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade perfUpgrade kernel-rtUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-develUpgrade kernel-uki-virt-addonsUpgrade libperfUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-core | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade cluster-md-kmp-64kbUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade gfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-qcomUpgrade kselftests-kmp-defaultUpgrade kernel-default-vdsoUpgrade dtb-allwinnerUpgrade dtb-caviumUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-syms-azureUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade kernel-rt-livepatchUpgrade kernel-rt-develUpgrade dtb-nvidiaUpgrade dtb-exynosUpgrade cluster-md-kmp-rtUpgrade dtb-mediatekUpgrade kernel-devel-azureUpgrade cluster-md-kmp-defaultUpgrade dlm-kmp-rtUpgrade kernel-64kb-extraUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade kernel-sourceUpgrade dtb-rockchipUpgrade dtb-sprdUpgrade kernel-develUpgrade kernel-obs-buildUpgrade kernel-obs-qaUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-default-livepatch-develUpgrade gfs2-kmp-rtUpgrade reiserfs-kmp-defaultUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade dlm-kmp-64kbUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade dtb-amdUpgrade dtb-amazonUpgrade dtb-alteraUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade kernel-default-develUpgrade kernel-64kb-optionalUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dtb-marvellUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade kernel-docs-htmlUpgrade dtb-lgUpgrade kernel-symsUpgrade dtb-broadcom | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-azure-6.14Upgrade linux-image-oracle-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-oracle-64kUpgrade linux-image-oem-6.14Upgrade linux-image-gcpUpgrade linux-image-aws-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-aws-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-oracle-64k-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub