In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-headersUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-abi-stablelistsUpgrade kernel-rtUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rt-64k-modulesUpgrade kernel-cross-headersUpgrade kernelUpgrade kernel-rt-modulesUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade rvUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-docUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-modules-extraUpgrade kernel-debug-modules-extraUpgrade kernel-toolsUpgrade kernel-uki-virtUpgrade kernel-64k-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade libperfUpgrade kernel-rt-64kUpgrade kernel-debug-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-coreUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-debug-modulesUpgrade kernel-zfcpdump-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-extraUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdumpUpgrade kernel-tools-libsUpgrade kernel-rt-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-develUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade rtlaUpgrade kernel-64k-modules-coreUpgrade kernel-rt-debugUpgrade kernel-modulesUpgrade kernel-64k-debug-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-coreUpgrade perf | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-zfcpdump-modulesUpgrade kernel-debug-modules-extraUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debugUpgrade python3-perf-debuginfoUpgrade kernel-debug-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-uki-virtUpgrade kernel-modules-extraUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-develUpgrade kernel-rt-debug-modulesUpgrade kernel-cross-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-headersUpgrade kernel-rt-kvmUpgrade kernel-debug-develUpgrade kernelUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade kernel-coreUpgrade kernel-rt-debuginfoUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-devel-matchedUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modulesUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-toolsUpgrade rvUpgrade kernel-uki-virtUpgrade perf-debuginfoUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-devel | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-rt-extraUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade dtb-nvidiaUpgrade dtb-qcomUpgrade kernel-defaultUpgrade kernel-rtUpgrade dtb-xilinxUpgrade kernel-develUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade cluster-md-kmp-rtUpgrade kernel-syms-azureUpgrade dlm-kmp-rtUpgrade kernel-default-extraUpgrade kernel-docsUpgrade kernel-azure-develUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade dtb-mediatekUpgrade dtb-armUpgrade kselftests-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-exynosUpgrade kernel-rt-develUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade dtb-sprdUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade kernel-64kb-develUpgrade dtb-alteraUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-zfcpdumpUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade reiserfs-kmp-defaultUpgrade dlm-kmp-64kbUpgrade dtb-lgUpgrade kernel-symsUpgrade gfs2-kmp-rtUpgrade kernel-64kbUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade kernel-rt-livepatch-develUpgrade ocfs2-kmp-rtUpgrade dtb-marvellUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-64kb-optionalUpgrade kernel-default-livepatchUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-freescaleUpgrade dtb-amlogicUpgrade dtb-amazon | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-6.14Upgrade linux-image-generic-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-raspi-6.14Upgrade linux-image-azure-6.14Upgrade linux-image-azureUpgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-awsUpgrade linux-image-virtual-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-virtualUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-aws-64kUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-64k-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub