CVE-2026-72425

Received Received - Intake

Resource Leak in Linux Kernel ICE Driver

Publication date: 2026-08-15

Last updated on: 2026-08-17

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function. Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-15

Last Modified

2026-08-17

Generated

2026-09-04

AI Q&A

2026-08-15

EPSS Evaluated

2026-09-03

NVD

CVE-2026-72425

EUVD

EUVD-2026-59324

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a resource leak in the ice driver when resetting all Virtual Functions (VFs). When resetting VFs with FDIR filters enabled, Control VSIs are not freed properly, leading to a leak. The fix uses ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() to align with ice_reset_vf() behavior.

Detection Guidance

This vulnerability can be detected by checking for resource leaks in VFs with FDIR filters after resetting. Use the provided reproduction steps to verify if the issue exists on your system. Monitor system logs for errors related to VSI resource leaks during VF resets.

Impact Analysis

This vulnerability could lead to resource exhaustion on systems using the ice driver with SR-IOV and FDIR filters. It may cause performance degradation or system instability due to leaked resources during VF resets.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards. It involves a resource leak in the Linux kernel's ice driver during VF reset operations, which could lead to denial-of-service conditions but does not involve data exposure or privacy violations.

Mitigation Strategies

Apply the Linux kernel patch that resolves this issue. Avoid resetting all VFs simultaneously if possible. If resets are necessary, ensure proper cleanup of CTRL VSI resources afterward.

Hi! I’m here to help you understand CVE-2026-72425. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70