In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-rt-debug-develUpgrade libperfUpgrade kernel-rtUpgrade kernel-abi-stablelistsUpgrade kernel-uki-virt-addonsUpgrade kernel-toolsUpgrade kernel-headersUpgrade kernelUpgrade kernel-rt-64k-debug-coreUpgrade kernel-docUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modulesUpgrade rvUpgrade kernel-rt-debug-kvmUpgrade kernel-rt-64k-debugUpgrade kernel-64kUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-uki-virtUpgrade kernel-rt-64kUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debugUpgrade kernel-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64k-debug-develUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade perfUpgrade kernel-rt-coreUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modules-coreUpgrade rtlaUpgrade kernel-develUpgrade kernel-rt-kvmUpgrade kernel-debug-modulesUpgrade kernel-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-modulesUpgrade python3-perfUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-debug-coreUpgrade kernel-64k-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-debug-uki-virtUpgrade kernel-tools-libsUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-debug-develUpgrade kernel-debugUpgrade kernel-rt-develUpgrade kernel-rt-modules-extraUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-rt-64k-debug-modules-extra | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-uki-virtUpgrade kernel-debug-debuginfoUpgrade kernel-rt-debug-coreUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-modulesUpgrade rtlaUpgrade kernel-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-modules-extraUpgrade kernel-tools-libsUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-develUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-cross-headersUpgrade kernel-debug-modulesUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernelUpgrade libperfUpgrade kernel-rt-debug-kvmUpgrade kernel-develUpgrade kernel-debug-devel-matchedUpgrade python3-perfUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-modulesUpgrade kernel-debugUpgrade kernel-coreUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-rt-debug-modules-coreUpgrade rvUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-rt-debug-develUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-rt-debuginfoUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-tools | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-docsUpgrade kernel-rt-livepatchUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-64kb-develUpgrade kernel-syms-azureUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kernel-rt-extraUpgrade kernel-default-vdsoUpgrade kernel-obs-qaUpgrade gfs2-kmp-defaultUpgrade kselftests-kmp-defaultUpgrade dtb-caviumUpgrade dlm-kmp-rtUpgrade kernel-azure-develUpgrade kernel-default-extraUpgrade dtb-armUpgrade kernel-rt-develUpgrade dtb-exynosUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-sourceUpgrade cluster-md-kmp-defaultUpgrade kernel-devel-azureUpgrade cluster-md-kmp-rtUpgrade kernel-kvmsmallUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade kernel-default-optionalUpgrade dtb-qcomUpgrade kernel-defaultUpgrade ocfs2-kmp-defaultUpgrade dtb-apmUpgrade kernel-rtUpgrade cluster-md-kmp-64kbUpgrade dtb-mediatekUpgrade kernel-rt-livepatch-develUpgrade kernel-azureUpgrade dtb-amdUpgrade dlm-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-64kbUpgrade kernel-rt-vdsoUpgrade kselftests-kmp-64kbUpgrade kernel-default-livepatchUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade kernel-macrosUpgrade kernel-default-baseUpgrade dtb-hisiliconUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-renesasUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade reiserfs-kmp-defaultUpgrade kernel-symsUpgrade dtb-alteraUpgrade dtb-amlogicUpgrade dtb-amazonUpgrade kernel-source-vanillaUpgrade kernel-source-azureUpgrade ocfs2-kmp-rtUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade dtb-marvellUpgrade dlm-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-freescaleUpgrade kernel-zfcpdump | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcp-64k-6.14Upgrade linux-image-generic-64kUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-raspi-6.14Upgrade linux-image-raspiUpgrade linux-image-gcp-6.14Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-virtual-6.14Upgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-aws-64kUpgrade linux-image-oem-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub