In the Linux kernel, the following vulnerability has been resolved:
ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues
Add NULL pointer checks in ice_vsi_set_napi_queues() to prevent crashes during resume from suspend when rings[q_idx]->q_vector is NULL.
Tested adaptor: 60:00.0 Ethernet controller [0200]: Intel Corporation Ethernet Controller E810-XXV for SFP [8086:159b] (rev 02) Subsystem: Intel Corporation Ethernet Network Adapter E810-XXV-2 [8086:4003]
SR-IOV state: both disabled and enabled can reproduce this issue.
kernel version: v6.18
Reproduce steps: Boot up and execute suspend like systemctl suspend or rtcwake.
Log: <1>[ 231.443607] BUG: kernel NULL pointer dereference, address: 0000000000000040 <1>[ 231.444052] #PF: supervisor read access in kernel mode <1>[ 231.444484] #PF: error_code(0x0000) - not-present page <6>[ 231.444913] PGD 0 P4D 0 <4>[ 231.445342] Oops: Oops: 0000 [#1] SMP NOPTI <4>[ 231.446635] RIP: 0010:netif_queue_set_napi+0xa/0x170 <4>[ 231.447067] Code: 31 f6 31 ff c3 cc cc cc cc 0f 1f 80 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 44 00 00 48 85 c9 74 0b <48> 83 79 30 00 0f 84 39 01 00 00 55 41 89 d1 49 89 f8 89 f2 48 89 <4>[ 231.447513] RSP: 0018:ffffcc780fc078c0 EFLAGS: 00010202 <4>[ 231.447961] RAX: ffff8b848ca30400 RBX: ffff8b848caf2028 RCX: 0000000000000010 <4>[ 231.448443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8b848dbd4000 <4>[ 231.448896] RBP: ffffcc780fc078e8 R08: 0000000000000000 R09: 0000000000000000 <4>[ 231.449345] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 <4>[ 231.449817] R13: ffff8b848dbd4000 R14: ffff8b84833390c8 R15: 0000000000000000 <4>[ 231.450265] FS: 00007c7b29e9d740(0000) GS:ffff8b8c068e2000(0000) knlGS:0000000000000000 <4>[ 231.450715] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 <4>[ 231.451179] CR2: 0000000000000040 CR3: 000000030626f004 CR4: 0000000000f72ef0 <4>[ 231.451629] PKRU: 55555554 <4>[ 231.452076] Call Trace: <4>[ 231.452549] <TASK> <4>[ 231.452996] ? ice_vsi_set_napi_queues+0x4d/0x110 [ice] <4>[ 231.453482] ice_resume+0xfd/0x220 [ice] <4>[ 231.453977] ? __pfx_pci_pm_resume+0x10/0x10 <4>[ 231.454425] pci_pm_resume+0x8c/0x140 <4>[ 231.454872] ? __pfx_pci_pm_resume+0x10/0x10 <4>[ 231.455347] dpm_run_callback+0x5f/0x160 <4>[ 231.455796] ? dpm_wait_for_superior+0x107/0x170 <4>[ 231.456244] device_resume+0x177/0x270 <4>[ 231.456708] dpm_resume+0x209/0x2f0 <4>[ 231.457151] dpm_resume_end+0x15/0x30 <4>[ 231.457596] suspend_devices_and_enter+0x1da/0x2b0 <4>[ 231.458054] enter_state+0x10e/0x570
Add defensive checks for both the ring pointer and its q_vector before dereferencing, allowing the system to resume successfully even when q_vectors are unmapped.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Oracle_linux | — | Upgrade kernel-uek | Mar 25, 2026 | Feb 14, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | Feb 14, 2026 |
| Ubuntu | — | Upgrade linux-image-lowlatency-64kUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-nvidia-tegra-rtUpgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-genericUpgrade linux-image-6.17.0-1030-oemUpgrade linux-image-generic-64kUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-intel-iotgUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-intel-iot-realtimeUpgrade linux-image-6.8.0-1058-gcp-64kUpgrade linux-image-azure-lts-24.04Upgrade linux-image-6.8.0-1054-gkeUpgrade linux-image-6.8.0-1056-raspiUpgrade linux-image-6.17.0-1031-nvidiaUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-6.8.0-1054-nvidia-64kUpgrade linux-image-oracle-64k-6.17Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-6.17.0-1021-azureUpgrade linux-image-6.8.0-1058-gcpUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gkeopUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-6.8.0-117-lowlatencyUpgrade linux-image-generic-lpaeUpgrade linux-image-azure-6.17Upgrade linux-image-ibm-classicUpgrade linux-image-gcp-fipsUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-117-generic-64kUpgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-6.8.0-117-lowlatency-64kUpgrade linux-image-nvidia-64k-hwe-24.04Upgrade linux-image-6.8.0-117-genericUpgrade linux-image-azure-6.8Upgrade linux-image-ibmUpgrade linux-image-oem-24.04bUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-nvidia-tegraUpgrade linux-image-6.8.0-1059-azure-fipsUpgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-116-fipsUpgrade linux-image-6.8.0-1055-aws-64kUpgrade linux-image-6.8.0-1054-gke-64kUpgrade linux-image-raspi-realtime-6.8Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-gkeUpgrade linux-image-oem-24.04Upgrade linux-image-nvidia-6.17Upgrade linux-image-6.17.0-1019-oracle-64kUpgrade linux-image-gkeop-6.8Upgrade linux-image-6.8.0-1055-awsUpgrade linux-image-fipsUpgrade linux-image-6.8.0-1055-aws-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-gke-64kUpgrade linux-image-6.8.0-2045-raspi-realtimeUpgrade linux-image-6.8.0-1055-ibmUpgrade linux-image-nvidia-hwe-24.04Upgrade linux-image-aws-fipsUpgrade linux-image-6.17.0-1018-azure-fdeUpgrade linux-image-6.8.0-1058-gcp-fipsUpgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidiaUpgrade linux-image-gke-6.8Upgrade linux-image-realtimeUpgrade linux-image-6.8.0-1041-gkeopUpgrade linux-image-6.17.0-1031-nvidia-64kUpgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-6.8.0-1059-azureUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1054-nvidiaUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-6.8.0-1054-nvidia-lowlatency-64kUpgrade linux-image-oem-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-realtime-6.17Upgrade linux-image-aws-lts-24.04Upgrade linux-image-oracle-6.17Upgrade linux-image-6.8.0-1054-nvidia-lowlatencyUpgrade linux-image-xilinxUpgrade linux-image-raspiUpgrade linux-image-nvidia-64k-6.17Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-ibm-6.8Upgrade linux-image-fips-6.8Upgrade linux-image-azure-fdeUpgrade linux-image-6.17.0-1021-gcpUpgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-xilinx-6.8Upgrade linux-image-realtime-6.8.1Upgrade linux-image-generic-6.8Upgrade linux-image-6.8.1-1051-realtimeUpgrade linux-image-oracleUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-gcp-6.8Upgrade linux-image-gcp-6.17Upgrade linux-image-6.8.0-1024-nvidia-tegraUpgrade linux-image-6.17.0-1018-realtimeUpgrade linux-image-virtual-6.8Upgrade linux-image-oem-24.04cUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-kvmUpgrade linux-image-azureUpgrade linux-image-aws-fips-6.8Upgrade linux-image-azure-fde-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-gke-64k-6.8Upgrade linux-image-oem-24.04dUpgrade linux-image-generic-64k-6.8Upgrade linux-image-6.8.0-1024-nvidia-tegra-rtUpgrade linux-image-6.17.0-1021-gcp-64kUpgrade linux-image-gcpUpgrade linux-image-raspi-realtimeUpgrade linux-image-gcp-64k-6.8Upgrade linux-image-realtime-hwe-22.04Upgrade linux-image-6.17.0-1019-oracleUpgrade linux-image-aws-64k-6.8Upgrade linux-image-6.8.0-1056-azureUpgrade linux-image-raspi-6.8Upgrade linux-image-nvidia-64kUpgrade linux-image-gcp-64kUpgrade linux-image-azure-fips-6.8 | May 25, 2026 | May 19, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub