In the Linux kernel, the following vulnerability has been resolved:
ice: reject out-of-range ptype in ice_parser_profile_init
set_bit(rslt->ptype, prof->ptypes) operates on a DECLARE_BITMAP of ICE_FLOW_PTYPE_MAX (1024) bits. Nothing prevents a malicious VF from providing ptype >= 1024 through VIRTCHNL, resulting in a write past the end of the bitmap and a kernel page fault.
Reproduced with a custom kernel module injecting a crafted VIRTCHNL_OP_ADD_RSS_CFG on E810-C QSFP (8086:1592), FW 4.91 0x800214af 1.3909.0, ICE COMMS DDP 1.3.53.0, kernel 7.1.0-rc1.
crash_parser: ice_parser_profile_init @ ffffffffc0d61b60 crash_parser: setting ptype=0xffff (max valid=1023) crash_parser: calling ice_parser_profile_init -- expect OOB crash! BUG: kernel NULL pointer dereference, address: 0000000000000000 Oops: Oops: 0002 [#1] SMP NOPTI CPU: 56 UID: 0 PID: 165011 Comm: insmod Kdump: loaded Tainted: G S U OE 7.1.0-rc1 #1 Hardware name: Intel Corporation S2600BPB/S2600BPB RIP: 0010:ice_parser_profile_init+0x2d/0x1d0 [ice] Call Trace: <TASK> ? __pfx_ice_parser_profile_init+0x10/0x10 [ice] crash_init+0x127/0xff0 [crash_parser] do_one_initcall+0x45/0x310 do_init_module+0x64/0x270 init_module_from_file+0xcc/0xf0 idempotent_init_module+0x17b/0x280 __x64_sys_finit_module+0x6e/0xe0
Bail out early with -EINVAL when ptype is out of range.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade kernel-64k-debug-develUpgrade kernel-rt-debug-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-develUpgrade kernel-docUpgrade kernel-modules-extra-matchedUpgrade kernel-headersUpgrade kernel-zfcpdump-modules-extraUpgrade kernel-64k-develUpgrade kernel-coreUpgrade kernel-modulesUpgrade kernel-rt-64k-develUpgrade kernel-modules-coreUpgrade kernel-debug-modulesUpgrade kernel-rt-64k-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-rt-debug-modules-extraUpgrade kernel-rt-64k-modules-coreUpgrade kernel-rt-64k-debug-modules-coreUpgrade kernel-zfcpdump-develUpgrade kernel-rt-develUpgrade kernel-modules-extraUpgrade kernel-debug-develUpgrade kernel-rt-debug-modules-coreUpgrade kernel-debug-coreUpgrade rtlaUpgrade kernel-rt-debugUpgrade kernel-64k-debug-modulesUpgrade kernel-develUpgrade kernel-zfcpdumpUpgrade kernel-64k-modules-coreUpgrade kernel-debug-modules-coreUpgrade kernel-rt-debug-modulesUpgrade kernel-rt-64k-coreUpgrade kernel-tools-libsUpgrade kernel-uki-virtUpgrade kernel-debugUpgrade kernel-debug-uki-virtUpgrade kernel-uki-virt-addonsUpgrade kernel-64k-coreUpgrade kernel-debug-modules-extraUpgrade kernel-debug-devel-matchedUpgrade kernel-64k-modules-extraUpgrade libperfUpgrade kernel-64k-modulesUpgrade python3-perfUpgrade kernel-64k-debug-coreUpgrade rvUpgrade kernel-rt-64kUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-rt-modules-extraUpgrade kernel-rt-64k-modulesUpgrade kernel-rt-64k-debug-coreUpgrade kernel-64k-debug-devel-matchedUpgrade kernel-toolsUpgrade kernel-64kUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-64k-debugUpgrade kernel-rtUpgrade kernel-64k-debug-modules-coreUpgrade kernel-zfcpdump-devel-matchedUpgrade kernel-devel-matchedUpgrade kernel-64k-devel-matchedUpgrade perfUpgrade kernel-cross-headersUpgrade kernel-abi-stablelistsUpgrade kernel-tools-libs-develUpgrade kernel-rt-64k-modules-extraUpgrade kernel-64k-debug-modules-extraUpgrade kernel-64k-debugUpgrade kernel-rt-64k-debug-modulesUpgrade kernelUpgrade kernel-rt-modules-coreUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-64k-debug-devel | Oct 11, 2026 | Sep 17, 2026 |
| Amazon_linux_2023 | — | Upgrade kernel6.18-headersUpgrade python3-perf6.18-debuginfoUpgrade bpftool6.18-debuginfoUpgrade kernel6.12-debuginfoUpgrade perf6.12Upgrade kernel6.12-debuginfo-common-x86_64Upgrade kernel6.18-tools-develUpgrade kernel-livepatch-6.18.44-99.149Upgrade kernel6.12-tools-debuginfoUpgrade kernel6.18-modules-extraUpgrade bpftool6.12Upgrade kernel6.12-modules-extraUpgrade kernel6.12-toolsUpgrade microvm-kernel6.18Upgrade perf6.18Upgrade kernel6.12-tools-develUpgrade kernel6.12-debuginfo-common-aarch64Upgrade kernel6.18-modules-extra-commonUpgrade kernel6.18-tools-debuginfoUpgrade python3-perf6.12-debuginfoUpgrade python3-perf6.18Upgrade kernel6.12-develUpgrade kernel6.12-modules-extra-commonUpgrade kernel6.18-toolsUpgrade perf6.18-debuginfoUpgrade python3-perf6.12Upgrade kernel6.12Upgrade kernel6.18-debuginfoUpgrade kernel6.18-develUpgrade perf6.12-debuginfoUpgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.12-headersUpgrade kernel-livepatch-6.12.103-127.188Upgrade bpftool6.18Upgrade bpftool6.12-debuginfoUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18 | Sep 1, 2026 | Aug 10, 2026 |
| Debian | — | Upgrade linuxUpgrade linux-6.12 | Aug 11, 2026 | Aug 11, 2026 |
| Oracle_linux | — | Upgrade kernel | Oct 22, 2026 | Aug 10, 2026 |
| Redhat_linux | — | Upgrade kernel-rtUpgrade kernelNo solution exists | Aug 17, 2026 | Aug 10, 2026 |
| Rocky_linux | — | Upgrade kernel-rt-modules-coreUpgrade rvUpgrade kernel-rtUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-coreUpgrade kernel-modules-extra-matchedUpgrade kernel-rt-debug-modulesUpgrade kernel-debug-uki-virtUpgrade python3-perf-debuginfoUpgrade kernel-zfcpdump-coreUpgrade kernel-rt-modules-extraUpgrade kernel-toolsUpgrade kernel-zfcpdump-modulesUpgrade kernel-rt-develUpgrade kernel-rt-debug-coreUpgrade kernel-debug-modulesUpgrade kernel-modulesUpgrade kernel-rt-debug-debuginfoUpgrade kernel-rt-debugUpgrade kernel-debug-modules-coreUpgrade kernel-debug-modules-extraUpgrade kernel-rt-modulesUpgrade kernel-tools-debuginfoUpgrade kernel-tools-libsUpgrade kernel-debuginfo-common-s390xUpgrade kernel-debugUpgrade kernel-develUpgrade kernel-modules-coreUpgrade kernel-rt-coreUpgrade kernel-rt-debug-modules-extraUpgrade kernel-zfcpdump-modules-coreUpgrade kernel-uki-virtUpgrade perfUpgrade kernel-zfcpdump-debuginfoUpgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade python3-perfUpgrade kernel-rt-debug-develUpgrade rtlaUpgrade kernel-devel-matchedUpgrade libperf-debuginfoUpgrade kernel-debug-devel-matchedUpgrade libperfUpgrade kernel-rt-debug-modules-coreUpgrade kernel-tools-libs-develUpgrade kernel-zfcpdump-develUpgrade kernel-debug-develUpgrade kernel-rt-debuginfoUpgrade kernel-debug-debuginfoUpgrade kernel-uki-virt-addonsUpgrade kernel-debug-coreUpgrade kernel-modules-extraUpgrade kernel-zfcpdumpUpgrade kernel-zfcpdump-devel-matchedUpgrade kernelUpgrade kernel-zfcpdump-modules-extra | Sep 23, 2026 | Sep 19, 2026 |
| Ubuntu | — | Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-virtualUpgrade linux-image-virtual-7.0Upgrade linux-image-awsUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-azure-fdeUpgrade linux-image-azure-lts-26.04Upgrade linux-image-genericUpgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-gke-64kUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-ibmUpgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-gke-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-oracleUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-gcp-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-aws-64k-7.0Upgrade linux-image-azure-fde-7.0Upgrade linux-image-aws-7.0Upgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-ibm-7.0Upgrade linux-image-realtimeUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-azureUpgrade linux-image-aws-64kUpgrade linux-image-oem-26.04Upgrade linux-image-gke-64k-7.0Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-26.04aUpgrade linux-image-gkeUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azure-7.0Upgrade linux-image-realtime-64kUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oem-7.0Upgrade linux-image-gcp-64kUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-generic-7.0Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-generic-hwe-26.04Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-generic-64k-7.0Upgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-virtual-hwe-24.04 | Oct 7, 2026 | Oct 6, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Aug 17, 2026 | Aug 10, 2026 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub