In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-develUpgrade kernel-rt-64k-develUpgrade rtlaUpgrade perfUpgrade kernel-64k-develUpgrade kernel-64k-debug-coreUpgrade kernel-tools-libsUpgrade kernel-rt-debug-coreUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-coreUpgrade kernel-debugUpgrade kernel-debug-modules-extraUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-modulesUpgrade libperfUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-debug-kvmUpgrade kernel-zfcpdump-modulesUpgrade kernel-tools-libs-develUpgrade kernel-uki-virt-addonsUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-64k-devel-matchedUpgrade kernel-toolsUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernelUpgrade rvUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-debug-devel-matchedUpgrade kernel-rt-debug-modules-coreUpgrade kernel-64k-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-64kUpgrade kernel-docUpgrade kernel-rt-64k-debug-coreUpgrade kernel-rtUpgrade kernel-headersUpgrade kernel-64k-debugUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virtUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modulesUpgrade kernel-rt-64kUpgrade kernel-modules-coreUpgrade kernel-debug-develUpgrade python3-perfUpgrade kernel-64k-modules-coreUpgrade kernel-rt-kvmUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modules-extraUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-64k-debug-develUpgrade kernel-64k-modules-extraUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-modulesUpgrade kernel-debug-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-zfcpdumpUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-zfcpdump-devel | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-devel-matchedUpgrade perfUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-modulesUpgrade libperf-debuginfoUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade kernel-debuginfo-common-s390xUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-coreUpgrade kernel-rt-coreUpgrade kernel-uki-virtUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-debuginfoUpgrade libperfUpgrade kernel-uki-virt-addonsUpgrade kernel-rtUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-rt-debug-kvmUpgrade kernel-modules-coreUpgrade kernel-toolsUpgrade rvUpgrade kernel-zfcpdump-modulesUpgrade kernel-zfcpdump-coreUpgrade kernel-modules-extraUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-extraUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-cross-headersUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-debug-uki-virtUpgrade kernel-rt-kvmUpgrade kernel-tools-libsUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-rt-modules-coreUpgrade kernel-debug-debuginfo | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade dtb-amlogicUpgrade dtb-freescaleUpgrade kernel-source-azureUpgrade kernel-rt-optionalUpgrade dtb-alteraUpgrade dlm-kmp-64kbUpgrade kernel-kvmsmall-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-source-vanillaUpgrade gfs2-kmp-64kbUpgrade kernel-zfcpdumpUpgrade kernel-default-livepatchUpgrade dtb-amazonUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-amdUpgrade kernel-macrosUpgrade kernel-default-develUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade dtb-marvellUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade kernel-default-livepatch-develUpgrade dtb-broadcomUpgrade dtb-appleUpgrade dtb-lgUpgrade dtb-socionextUpgrade kernel-64kbUpgrade kernel-docs-htmlUpgrade ocfs2-kmp-rtUpgrade kselftests-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade kselftests-kmp-rtUpgrade kernel-rt-vdsoUpgrade dtb-nvidiaUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-sprdUpgrade dtb-allwinnerUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-qcomUpgrade cluster-md-kmp-64kbUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade dtb-apmUpgrade kernel-defaultUpgrade kernel-default-vdsoUpgrade kernel-64kb-develUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-caviumUpgrade kernel-kvmsmallUpgrade kernel-rt-extraUpgrade dtb-exynosUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade kernel-docsUpgrade dlm-kmp-rtUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade kernel-rt-livepatchUpgrade cluster-md-kmp-defaultUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade kernel-default-optionalUpgrade cluster-md-kmp-rtUpgrade dtb-xilinxUpgrade dtb-mediatekUpgrade kernel-default-extraUpgrade dtb-rockchip | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-genericUpgrade linux-image-generic-6.14Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-generic-64kUpgrade linux-image-azure-6.14Upgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-realtime-6.14Upgrade linux-image-realtimeUpgrade linux-image-raspiUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-34-genericUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-gcp-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-virtual-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-oem-24.04bUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-aws-64k-6.14Upgrade linux-image-azure-nvidia-6.14Upgrade linux-image-oem-24.04aUpgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-virtualUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-generic-64k-6.14Upgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-oem-24.04 | Jul 31, 2025 | Jul 25, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub