In the Linux kernel, the following vulnerability has been resolved:
ice: fix eswitch code memory leak in reset scenario
Add simple eswitch mode checker in attaching VF procedure and allocate required port representor memory structures only in switchdev mode. The reset flows triggers VF (if present) detach/attach procedure. It might involve VF port representor(s) re-creation if the device is configured is switchdev mode (not legacy one). The memory was blindly allocated in current implementation, regardless of the mode and not freed if in legacy mode.
Kmemeleak trace: unreferenced object (percpu) 0x7e3bce5b888458 (size 40): comm "bash", pid 1784, jiffies 4295743894 hex dump (first 32 bytes on cpu 45): 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ backtrace (crc 0): pcpu_alloc_noprof+0x4c4/0x7c0 ice_repr_create+0x66/0x130 [ice] ice_repr_create_vf+0x22/0x70 [ice] ice_eswitch_attach_vf+0x1b/0xa0 [ice] ice_reset_all_vfs+0x1dd/0x2f0 [ice] ice_pci_err_resume+0x3b/0xb0 [ice] pci_reset_function+0x8f/0x120 reset_store+0x56/0xa0 kernfs_fop_write_iter+0x120/0x1b0 vfs_write+0x31c/0x430 ksys_write+0x61/0xd0 do_syscall_64+0x5b/0x180 entry_SYSCALL_64_after_hwframe+0x76/0x7e
Testing hints (ethX is PF netdev): - create at least one VF echo 1 > /sys/class/net/ethX/device/sriov_numvfs - trigger the reset echo 1 > /sys/class/net/ethX/device/reset
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-rt-64k-debug-modulesUpgrade libperfUpgrade kernel-rtUpgrade kernel-rt-debug-develUpgrade kernel-toolsUpgrade kernel-64k-debugUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modulesUpgrade kernel-rt-64k-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-modules-coreUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-debug-modules-coreUpgrade kernel-devel-matchedUpgrade kernel-docUpgrade kernel-64k-debug-modules-extraUpgrade kernel-rt-64k-debugUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64kUpgrade kernel-rt-debug-kvmUpgrade kernel-tools-libs-develUpgrade kernelUpgrade kernel-64k-coreUpgrade kernel-rt-64k-debug-develUpgrade kernel-rt-modules-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-rt-64k-modulesUpgrade kernel-debug-modules-extraUpgrade rvUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modulesUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-cross-headersUpgrade kernel-64k-devel-matchedUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-headersUpgrade kernel-abi-stablelistsUpgrade kernel-rt-64kUpgrade kernel-uki-virtUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-rt-develUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-64k-debug-modules-coreUpgrade kernel-rt-coreUpgrade perfUpgrade kernel-coreUpgrade kernel-rt-64k-coreUpgrade kernel-zfcpdump-develUpgrade kernel-modulesUpgrade kernel-zfcpdumpUpgrade kernel-rt-modules-extraUpgrade kernel-64k-modules-coreUpgrade kernel-tools-libsUpgrade python3-perfUpgrade kernel-rt-kvmUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-debug-develUpgrade kernel-modules-extraUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-64k-develUpgrade kernel-rt-64k-develUpgrade kernel-debugUpgrade kernel-64k-debug-coreUpgrade kernel-debug-uki-virtUpgrade kernel-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-64k-modules-extraUpgrade kernel-64k-debug-develUpgrade kernel-rt-debug-modulesUpgrade kernel-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modules | Aug 28, 2025 | Aug 25, 2025 |
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel | Aug 27, 2025 | Jul 25, 2025 |
| Redhat_linux | — | Upgrade kernelNo solution existsUpgrade kernel-rt | Jul 31, 2025 | Jul 25, 2025 |
| Rocky_linux | — | Upgrade kernel-rt-debug-kvmUpgrade kernel-toolsUpgrade libperfUpgrade kernel-develUpgrade perfUpgrade kernel-rtUpgrade kernel-uki-virtUpgrade kernel-coreUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-devel-matchedUpgrade libperf-debuginfoUpgrade python3-perfUpgrade rvUpgrade kernel-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-debuginfo-common-s390xUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-devel-matchedUpgrade kernel-tools-libs-develUpgrade kernel-rt-debug-develUpgrade kernel-zfcpdumpUpgrade kernel-debugUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-rt-debuginfoUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade perf-debuginfoUpgrade python3-perf-debuginfoUpgrade kernel-rt-modules-coreUpgrade kernel-rt-debug-coreUpgrade rtlaUpgrade kernel-cross-headersUpgrade kernel-zfcpdump-coreUpgrade kernel-debug-modules-coreUpgrade kernel-modules-extraUpgrade kernel-debug-debuginfoUpgrade kernel-rt-develUpgrade kernel-zfcpdump-modulesUpgrade kernel-debug-coreUpgrade kernelUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-debuginfoUpgrade kernel-debug-develUpgrade kernel-debug-modulesUpgrade kernel-rt-debug-modulesUpgrade kernel-tools-libsUpgrade kernel-debug-uki-virtUpgrade kernel-zfcpdump-debuginfoUpgrade kernel-rt-kvmUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debug-modules-extraUpgrade kernel-rt-debugUpgrade kernel-tools-debuginfoUpgrade kernel-rt-debug-debuginfo | Feb 5, 2026 | Oct 4, 2025 |
| Suse | — | Upgrade kernel-rt-livepatchUpgrade kernel-syms-azureUpgrade kernel-default-extraUpgrade dlm-kmp-rtUpgrade dtb-armUpgrade kernel-azure-develUpgrade kernel-docsUpgrade kernel-rt-extraUpgrade dtb-caviumUpgrade kernel-64kb-develUpgrade kernel-kvmsmallUpgrade kernel-default-vdsoUpgrade kernel-rt-develUpgrade kernel-develUpgrade kernel-obs-qaUpgrade dtb-rockchipUpgrade dtb-mediatekUpgrade dtb-exynosUpgrade ocfs2-kmp-defaultUpgrade kernel-64kb-extraUpgrade kernel-obs-buildUpgrade kernel-devel-azureUpgrade dtb-qcomUpgrade kernel-sourceUpgrade cluster-md-kmp-64kbUpgrade cluster-md-kmp-rtUpgrade dtb-nvidiaUpgrade dtb-xilinxUpgrade dtb-apmUpgrade dtb-allwinnerUpgrade dtb-sprdUpgrade kselftests-kmp-defaultUpgrade kernel-default-optionalUpgrade gfs2-kmp-defaultUpgrade cluster-md-kmp-defaultUpgrade kernel-defaultUpgrade kernel-rtUpgrade dtb-marvellUpgrade gfs2-kmp-rtUpgrade dtb-lgUpgrade dtb-broadcomUpgrade kernel-default-livepatch-develUpgrade kernel-docs-htmlUpgrade kernel-symsUpgrade reiserfs-kmp-defaultUpgrade dtb-amlogicUpgrade dtb-freescaleUpgrade ocfs2-kmp-rtUpgrade kernel-rt-vdsoUpgrade kernel-rt-optionalUpgrade kernel-kvmsmall-vdsoUpgrade kernel-kvmsmall-develUpgrade kernel-azureUpgrade dtb-hisiliconUpgrade kernel-macrosUpgrade dtb-amdUpgrade kernel-default-baseUpgrade dtb-amazonUpgrade dlm-kmp-64kbUpgrade kernel-source-vanillaUpgrade kernel-64kb-optionalUpgrade kselftests-kmp-64kbUpgrade gfs2-kmp-64kbUpgrade dtb-appleUpgrade kernel-default-develUpgrade kernel-default-livepatchUpgrade kernel-zfcpdumpUpgrade dtb-alteraUpgrade kernel-source-azureUpgrade kernel-rt-livepatch-develUpgrade kernel-64kbUpgrade dtb-socionextUpgrade dtb-renesasUpgrade dlm-kmp-defaultUpgrade ocfs2-kmp-64kbUpgrade kselftests-kmp-rt | Dec 5, 2025 | Aug 28, 2025 |
| Ubuntu | — | Upgrade linux-image-realtimeUpgrade linux-image-6.14.0-34-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-genericUpgrade linux-image-6.14.0-1014-oemUpgrade linux-image-gcp-6.14Upgrade linux-image-realtime-6.14Upgrade linux-image-6.14.0-1015-oracleUpgrade linux-image-azure-6.14Upgrade linux-image-gcp-64k-6.14Upgrade linux-image-raspiUpgrade linux-image-6.14.0-1015-oracle-64kUpgrade linux-image-aws-6.14Upgrade linux-image-generic-64kUpgrade linux-image-oracle-6.14Upgrade linux-image-raspi-6.14Upgrade linux-image-6.14.0-1018-gcp-64kUpgrade linux-image-6.14.0-1016-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-generic-6.14Upgrade linux-image-6.14.0-34-genericUpgrade linux-image-azureUpgrade linux-image-6.14.0-1014-azureUpgrade linux-image-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-oem-24.04bUpgrade linux-image-virtual-6.14Upgrade linux-image-oracleUpgrade linux-image-oem-24.04Upgrade linux-image-virtualUpgrade linux-image-oem-24.04aUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.14.0-1018-gcpUpgrade linux-image-6.14.0-1007-azure-nvidiaUpgrade linux-image-generic-64k-6.14Upgrade linux-image-6.14.0-1015-aws-64kUpgrade linux-image-6.14.0-1015-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-aws-64k-6.14Upgrade linux-image-gcpUpgrade linux-image-oem-6.14Upgrade linux-image-aws-64kUpgrade linux-image-azure-nvidia-6.14Upgrade linux-image-6.14.0-1014-realtimeUpgrade linux-image-azure-nvidiaUpgrade linux-image-awsUpgrade linux-image-oracle-64k-6.14 | Jul 31, 2025 | Jul 25, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub