In the Linux kernel, the following vulnerability has been resolved:
ice: fix PTP cleanup on driver removal in error path
Improve the cleanup on releasing PTP resources in error path. The error case might happen either at the driver probe and PTP feature initialization or on PTP restart (errors in reset handling, NVM update etc). In both cases, calls to PF PTP cleanup (ice_ptp_cleanup_pf function) and 'ps_lock' mutex deinitialization were missed. Additionally, ptp clock was not unregistered in the latter case.
Keep PTP state as 'uninitialized' on init to distinguish between error scenarios and to avoid resource release duplication at driver removal.
The consequence of missing ice_ptp_cleanup_pf call is the following call trace dumped when ice_adapter object is freed (port list is not empty, as it is required at this stage):
[ T93022] ------------[ cut here ]------------ [ T93022] WARNING: CPU: 10 PID: 93022 at ice/ice_adapter.c:67 ice_adapter_put+0xef/0x100 [ice] ... [ T93022] RIP: 0010:ice_adapter_put+0xef/0x100 [ice] ... [ T93022] Call Trace: [ T93022] <TASK> [ T93022] ? ice_adapter_put+0xef/0x100 [ice 33d2647ad4f6d866d41eefff1806df37c68aef0c] [ T93022] ? __warn.cold+0xb0/0x10e [ T93022] ? ice_adapter_put+0xef/0x100 [ice 33d2647ad4f6d866d41eefff1806df37c68aef0c] [ T93022] ? report_bug+0xd8/0x150 [ T93022] ? handle_bug+0xe9/0x110 [ T93022] ? exc_invalid_op+0x17/0x70 [ T93022] ? asm_exc_invalid_op+0x1a/0x20 [ T93022] ? ice_adapter_put+0xef/0x100 [ice 33d2647ad4f6d866d41eefff1806df37c68aef0c] [ T93022] pci_device_remove+0x42/0xb0 [ T93022] device_release_driver_internal+0x19f/0x200 [ T93022] driver_detach+0x48/0x90 [ T93022] bus_remove_driver+0x70/0xf0 [ T93022] pci_unregister_driver+0x42/0xb0 [ T93022] ice_module_exit+0x10/0xdb0 [ice 33d2647ad4f6d866d41eefff1806df37c68aef0c] ... [ T93022] ---[ end trace 0000000000000000 ]--- [ T93022] ice: module unloaded
CVSS Details
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Feb 24, 2026 | Dec 16, 2025 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Dec 16, 2025 |
| Ubuntu | — | Upgrade linux-image-azureUpgrade linux-image-oracle-6.17Upgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-19-generic-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-raspi-6.17Upgrade linux-image-gcpUpgrade linux-image-gcp-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1009-awsUpgrade linux-image-oem-24.04dUpgrade linux-image-6.17.0-1010-azureUpgrade linux-image-6.17.0-1009-oracle-64kUpgrade linux-image-6.17.0-19-genericUpgrade linux-image-6.17.0-1009-gcp-64kUpgrade linux-image-oracle-64kUpgrade linux-image-gcp-64kUpgrade linux-image-oracleUpgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1008-realtimeUpgrade linux-image-6.17.0-1010-raspiUpgrade linux-image-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-awsUpgrade linux-image-raspiUpgrade linux-image-oem-24.04bUpgrade linux-image-virtualUpgrade linux-image-generic-64k-6.17Upgrade linux-image-aws-6.17Upgrade linux-image-6.17.0-1009-oracleUpgrade linux-image-generic-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-aws-64k-6.17Upgrade linux-image-aws-64kUpgrade linux-image-generic-64kUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-genericUpgrade linux-image-6.17.0-1017-oemUpgrade linux-image-virtual-6.17Upgrade linux-image-azure-6.17Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-6.17.0-1009-gcpUpgrade linux-image-6.17.0-1009-aws-64kUpgrade linux-image-oem-24.04 | Mar 17, 2026 | Dec 16, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub