CVE-2026-72425
In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed.
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (0.18%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function. Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset
- CVSS 3.1
- 7.1 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H
- EPSS
- 0.18% probability · 8th percentile
- CISA KEV
- Not listed
- Source
- 416baaa9-dc9f-4396-8d5f-8c081fb06d67
References
- https://git.kernel.org/stable/c/335c2dd21ad9d520102906f96edb99fd5e89ac32
- https://git.kernel.org/stable/c/87a042e45bf4870dc75ea05b4fc0286abecb2a4d
- https://git.kernel.org/stable/c/b1fc5bafbc5f84df457b6f987ac993e0802f8d93
- https://git.kernel.org/stable/c/b409a9dc37db8bd798122fc5bcdcfaccaf80db1e
- https://git.kernel.org/stable/c/dd6d8e4412f805937f61f00bbfdfe831978be235
- https://git.kernel.org/stable/c/ebbe8868cf473f698e0fbaf436d2618b2bcda806
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.