CVE-2026-72425

Summary

In the Linux kernel, the following vulnerability has been resolved:

ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function.

Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset

Affected Software

VendorProductVersion RangeStatus
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < b409a9dc37db8bd798122fc5bcdcfaccaf80db1eaffected
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < 335c2dd21ad9d520102906f96edb99fd5e89ac32affected
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < 87a042e45bf4870dc75ea05b4fc0286abecb2a4daffected
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < dd6d8e4412f805937f61f00bbfdfe831978be235affected
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < b1fc5bafbc5f84df457b6f987ac993e0802f8d93affected
LinuxLinuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 < ebbe8868cf473f698e0fbaf436d2618b2bcda806affected
LinuxLinux5.13affected
LinuxLinux0 < 5.13unaffected
LinuxLinux6.1.178 <= 6.1.*unaffected
LinuxLinux6.6.145 <= 6.6.*unaffected
LinuxLinux6.12.97 <= 6.12.*unaffected
LinuxLinux6.18.40 <= 6.18.*unaffected
LinuxLinux7.1.5 <= 7.1.*unaffected
LinuxLinux7.2 <= *unaffected

Weaknesses

References