In the Linux kernel, the following vulnerability has been resolved:
ice: reject out-of-range ptype in ice_parser_profile_init
set_bit(rslt->ptype, prof->ptypes) operates on a DECLARE_BITMAP of ICE_FLOW_PTYPE_MAX (1024) bits. Nothing prevents a malicious VF from providing ptype >= 1024 through VIRTCHNL, resulting in a write past the end of the bitmap and a kernel page fault.
Reproduced with a custom kernel module injecting a crafted VIRTCHNL_OP_ADD_RSS_CFG on E810-C QSFP (8086:1592), FW 4.91 0x800214af 1.3909.0, ICE COMMS DDP 1.3.53.0, kernel 7.1.0-rc1.
crash_parser: ice_parser_profile_init @ ffffffffc0d61b60 crash_parser: setting ptype=0xffff (max valid=1023) crash_parser: calling ice_parser_profile_init -- expect OOB crash! BUG: kernel NULL pointer dereference, address: 0000000000000000 Oops: Oops: 0002 [#1] SMP NOPTI CPU: 56 UID: 0 PID: 165011 Comm: insmod Kdump: loaded Tainted: G S U OE 7.1.0-rc1 #1 Hardware name: Intel Corporation S2600BPB/S2600BPB RIP: 0010:ice_parser_profile_init+0x2d/0x1d0 [ice] Call Trace: <TASK> ? __pfx_ice_parser_profile_init+0x10/0x10 [ice] crash_init+0x127/0xff0 [crash_parser] do_one_initcall+0x45/0x310 do_init_module+0x64/0x270 init_module_from_file+0xcc/0xf0 idempotent_init_module+0x17b/0x280 __x64_sys_finit_module+0x6e/0xe0
Bail out early with -EINVAL when ptype is out of range.
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-debugUpgrade kernel-64k-modules-coreUpgrade kernel-coreUpgrade kernel-modules-extraUpgrade rtlaUpgrade kernel-headersUpgrade kernel-rt-64k-modules-coreUpgrade kernel-64k-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-64k-coreUpgrade kernel-rt-64k-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-debug-uki-virtUpgrade kernel-modulesUpgrade kernel-docUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-debug-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdumpUpgrade kernel-develUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-coreUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-64k-debug-coreUpgrade python3-perfUpgrade kernel-debug-modules-extraUpgrade kernel-rt-64k-debug-develUpgrade kernelUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-64k-debugUpgrade kernel-64k-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64kUpgrade rvUpgrade kernel-rt-64kUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64k-debug-modules-coreUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade kernel-64k-debug-devel-matchedUpgrade perfUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-coreUpgrade kernel-toolsUpgrade kernel-rt-64k-debug | Oct 11, 2026 | Sep 17, 2026 |
| Amazon_linux_2023 | — | Upgrade python3-perf6.12Upgrade kernel6.18-toolsUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.12-tools-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.12-debuginfoUpgrade microvm-kernel6.18Upgrade kernel6.12-debuginfo-common-x86_64Upgrade python3-perf6.12-debuginfoUpgrade kernel6.12-modules-extraUpgrade kernel6.12-toolsUpgrade kernel6.18-modules-extraUpgrade python3-perf6.18Upgrade kernel6.18-tools-develUpgrade kernel6.12-tools-debuginfoUpgrade kernel6.18-headersUpgrade bpftool6.12Upgrade perf6.18-debuginfoUpgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.12-develUpgrade kernel6.18-modules-extra-commonUpgrade perf6.18Upgrade kernel6.12-debuginfo-common-aarch64Upgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade perf6.12Upgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade kernel-livepatch-6.12.103-127.188Upgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade bpftool6.12-debuginfoUpgrade perf6.12-debuginfoUpgrade kernel6.12 | Sep 1, 2026 | Aug 10, 2026 |
| Debian | — | Upgrade linux-6.12Upgrade linux | Aug 11, 2026 | Aug 11, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Aug 10, 2026 |
| Redhat_linux | — | No solution existsUpgrade kernelUpgrade kernel-rt | Aug 17, 2026 | Aug 10, 2026 |
| Rocky_linux | — | Upgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-debuginfoUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade python3-perfUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade perf-debuginfoUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-devel-matchedUpgrade perfUpgrade kernel-rt-debug-modules-extraUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-uki-virtUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debugUpgrade kernel-rtUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-modulesUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-toolsUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-uki-virt-addonsUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debug-modules-coreUpgrade kernel-tools-libsUpgrade kernel-debug-develUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade rvUpgrade kernel-debug-modules-extra | Sep 23, 2026 | Sep 19, 2026 |
| Ubuntu | — | Upgrade linux-image-gke-64k-7.0Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gkeUpgrade linux-image-realtime-64kUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-generic-64k-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-oem-7.0Upgrade linux-image-realtime-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-generic-64kUpgrade linux-image-generic-7.0Upgrade linux-image-oracle-64k-7.0Upgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1017-azureUpgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-aws-64kUpgrade linux-image-oem-26.04Upgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-oem-26.04aUpgrade linux-image-oracle-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-lts-26.04Upgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-virtual-7.0Upgrade linux-image-gke-hwe-26.04Upgrade linux-image-awsUpgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-virtual-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-realtime-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-realtime-7.0Upgrade linux-image-azure-fdeUpgrade linux-image-7.0.0-1014-awsUpgrade linux-image-oracle-7.0Upgrade linux-image-gke-64kUpgrade linux-image-gcp-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-realtimeUpgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-oracleUpgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-ibmUpgrade linux-image-gke-7.0Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-generic | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub