In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rtUpgrade kernel-rt-64kUpgrade kernel-rt-modules-coreUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-64k-devel-matchedUpgrade kernel-rt-64k-debug-modulesUpgrade kernel-modules-coreUpgrade kernel-64kUpgrade kernel-tools-libs-develUpgrade kernel-debug-modules-coreUpgrade kernel-rt-kvmUpgrade rtlaUpgrade kernel-develUpgrade kernel-coreUpgrade perfUpgrade kernel-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-debugUpgrade kernel-64k-debug-coreUpgrade kernel-rt-debug-coreUpgrade kernel-zfcpdump-develUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-coreUpgrade kernel-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-64k-debug-modules-coreUpgrade kernel-64k-modules-extraUpgrade kernel-debugUpgrade kernel-zfcpdumpUpgrade kernel-rt-develUpgrade kernel-64k-debug-develUpgrade kernel-rt-modules-extraUpgrade kernel-debug-uki-virtUpgrade kernel-rt-64k-develUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-64k-debug-modulesUpgrade kernel-devel-matchedUpgrade kernel-rt-modulesUpgrade kernel-docUpgrade libperfUpgrade kernel-zfcpdump-coreUpgrade kernel-zfcpdump-modulesUpgrade kernel-headersUpgrade kernel-64k-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-uki-virtUpgrade kernel-rt-debug-develUpgrade kernel-rt-64k-debugUpgrade kernel-64k-debugUpgrade kernel-rt-debug-kvmUpgrade kernel-cross-headersUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-coreUpgrade kernelUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade rv | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | No solution existsUpgrade kernel-rtUpgrade kernel | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade libperfUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debugUpgrade kernel-rt-debuginfoUpgrade libperf-debuginfoUpgrade perf-debuginfoUpgrade kernel-rt-debug-modules-extraUpgrade rvUpgrade kernel-zfcpdump-develUpgrade kernel-zfcpdumpUpgrade kernel-rt-modulesUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-develUpgrade kernel-rt-coreUpgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade kernel-rt-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-rtUpgrade kernel-uki-virt-addonsUpgrade python3-perfUpgrade kernel-debug-devel-matchedUpgrade kernel-debuginfo-common-s390xUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-cross-headersUpgrade rtlaUpgrade kernel-debug-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-debugUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-debug-debuginfoUpgrade kernel-debug-modules-extraUpgrade kernel-tools-debuginfoUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade kernel-tools-libsUpgrade python3-perf-debuginfoUpgrade kernel-rt-develUpgrade kernel-debug-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-modules-extraUpgrade kernel-debug-modules-core | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-64kb-optionalUpgrade kernel-default-develUpgrade gfs2-kmp-64kbUpgrade kernel-default-livepatchUpgrade dtb-hisiliconUpgrade kernel-default-baseUpgrade dtb-appleUpgrade kselftests-kmp-64kbUpgrade kernel-source-azureUpgrade kernel-source-vanillaUpgrade dtb-freescaleUpgrade kernel-macrosUpgrade dtb-amazonUpgrade dtb-amlogicUpgrade dtb-amdUpgrade kselftests-kmp-rtUpgrade ocfs2-kmp-64kbUpgrade gfs2-kmp-rtUpgrade kernel-docs-htmlUpgrade dtb-broadcomUpgrade dtb-lgUpgrade kernel-symsUpgrade kernel-zfcpdumpUpgrade dtb-renesasUpgrade dtb-socionextUpgrade dtb-marvellUpgrade kernel-64kbUpgrade kernel-default-livepatch-develUpgrade dlm-kmp-defaultUpgrade dtb-alteraUpgrade kernel-kvmsmall-develUpgrade ocfs2-kmp-rtUpgrade kernel-azureUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade dlm-kmp-64kbUpgrade kernel-rt-livepatch-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-optionalUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade dtb-allwinnerUpgrade kernel-sourceUpgrade kernel-devel-azureUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade cluster-md-kmp-rtUpgrade cluster-md-kmp-defaultUpgrade dtb-qcomUpgrade kernel-default-vdsoUpgrade dtb-caviumUpgrade kernel-obs-qaUpgrade kernel-develUpgrade dtb-rockchipUpgrade kernel-rt-livepatchUpgrade dtb-apmUpgrade kernel-syms-azureUpgrade kernel-azure-develUpgrade dlm-kmp-rtUpgrade kernel-rt-extraUpgrade kernel-docsUpgrade kernel-default-extraUpgrade ocfs2-kmp-defaultUpgrade kernel-rtUpgrade kernel-defaultUpgrade cluster-md-kmp-64kbUpgrade kernel-obs-buildUpgrade kernel-64kb-extraUpgrade dtb-mediatekUpgrade kernel-rt-develUpgrade dtb-armUpgrade dtb-exynosUpgrade kselftests-kmp-defaultUpgrade gfs2-kmp-defaultUpgrade dtb-sprd | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-virtual-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-oracle-64k-6.14Upgrade linux-image-oem-24.04Upgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-aws-64kUpgrade linux-image-oracleUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.14.0-1015-awsUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-generic-64k-6.14Upgrade linux-image-aws-64k-6.14Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtualUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-oem-24.04cUpgrade linux-image-awsUpgrade linux-image-azure-nvidiaUpgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-oem-24.04aUpgrade linux-image-oem-24.04bUpgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.14Upgrade linux-image-generic-64kUpgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-generic-6.14Upgrade linux-image-raspiUpgrade linux-image-aws-6.14Upgrade linux-image-6.14.0-1014-oemUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-6.14.0-1014-azureUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-raspi-6.14Upgrade linux-image-azureUpgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-gcp-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-gcp-6.14 | Jul 31, 2025 | Jul 25, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub