CVE-2026-68133
Received Received - Intake

Kernel BUG in Ice PTP Driver During Release

Publication date: 2026-08-10

Last updated on: 2026-08-10

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ice: fix PTP Call Trace during PTP release If a PF reset occurs when the PTP state is ICE_PTP_UNINIT, then ice_ptp_rebuild() will update the state to ICE_PTP_ERROR. This will result in the following PTP release call trace during driver unload: kernel BUG at lib/list_debug.c:52! ice_ptp_release+0x332/0x3c0 [ice] ice_deinit_features.part.0+0x10e/0x120 [ice] ice_remove+0x100/0x220 [ice] This was observed when passing PF1 through to a VM. ice_ptp_init() fails because ctrl_pf is NULL and sets the state to ICE_PTP_UNINIT. Fix by detecting the ICE_PTP_UNINIT state in ice_ptp_rebuild() and returning without error, preventing the invalid state transition to ICE_PTP_ERROR. The only valid path to ICE_PTP_ERROR is from ICE_PTP_RESETTING after a failed rebuild.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-10
Last Modified
2026-08-10
Generated
2026-08-10
AI Q&A
2026-08-10
EPSS Evaluated
N/A
NVD
CVE-2026-68133
EUVD
EUVD-2026-55514

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
intel ice *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a bug in the ice driver's PTP (Precision Time Protocol) handling. When a PF reset occurs with the PTP state set to ICE_PTP_UNINIT, the ice_ptp_rebuild function incorrectly transitions the state to ICE_PTP_ERROR. This leads to a kernel bug during PTP release when unloading the driver, causing a crash with a trace pointing to lib/list_debug.c.

Detection Guidance

This vulnerability is specific to the Linux kernel's ice driver and may manifest as a kernel BUG during PTP release. Detection involves checking kernel logs for traces related to ice_ptp_release or ice_ptp_rebuild. Commands like dmesg | grep ice or journalctl -k | grep ice may help identify the issue.

Impact Analysis

If you use a system with the Intel ice network driver and a PF (Physical Function) is passed to a VM, this vulnerability could cause a kernel crash during driver unloading. This may result in system instability or downtime, particularly in virtualized environments where PFs are frequently reassigned.

Mitigation Strategies

Apply the kernel patch that fixes the ice driver PTP state transition issue. Update to a patched kernel version where the fix for CVE-2026-68133 is included. Avoid passing PF1 to a VM until the patch is applied.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-68133. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart