CVE-2025-40185
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-11-12

Last updated on: 2025-11-14

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter allocation failure When ice_adapter_new() fails, the reserved XArray entry created by xa_insert() is not released. This causes subsequent insertions at the same index to return -EBUSY, potentially leading to NULL pointer dereferences. Reorder the operations as suggested by Przemek Kitszel: 1. Check if adapter already exists (xa_load) 2. Reserve the XArray slot (xa_reserve) 3. Allocate the adapter (ice_adapter_new) 4. Store the adapter (xa_store)
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-11-12
Last Modified
2025-11-14
Generated
2026-05-06
AI Q&A
2025-11-13
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Showing 1 associated CPE
Vendor Product Version / Range
intel ice_adapter *
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability occurs in the Linux kernel's ice driver where, if the function ice_adapter_new() fails during adapter allocation, a reserved XArray entry created by xa_insert() is not released. This causes subsequent insertions at the same index to fail with an -EBUSY error, which can potentially lead to NULL pointer dereferences. The issue is related to improper handling of the XArray reservation and allocation sequence.


How can this vulnerability impact me? :

The vulnerability can cause failures in adapter allocation within the Linux kernel, leading to errors when inserting entries into the XArray. This may result in NULL pointer dereferences, which can cause system instability or crashes, potentially impacting system reliability and availability.


What immediate steps should I take to mitigate this vulnerability?

To mitigate this vulnerability, update the Linux kernel to a version where the issue is fixed by applying the patch that reorders the operations in ice_adapter allocation as described: check if adapter exists (xa_load), reserve the XArray slot (xa_reserve), allocate the adapter (ice_adapter_new), and then store the adapter (xa_store). This prevents the reserved XArray entry from leaking and avoids subsequent errors.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart