Riskcovery

CVE-2025-40185

ice: ice_adapter: release xa entry on adapter allocation failure

State
Published
Severity
Not scored
Published
Nov 12, 2025
Updated
May 11, 2026
Reserved
Apr 16, 2025

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: ice_adapter: release xa entry on adapter allocation failure

When ice_adapter_new() fails, the reserved XArray entry created by xa_insert() is not released. This causes subsequent insertions at the same index to return -EBUSY, potentially leading to NULL pointer dereferences.

Reorder the operations as suggested by Przemek Kitszel: 1. Check if adapter already exists (xa_load) 2. Reserve the XArray slot (xa_reserve) 3. Allocate the adapter (ice_adapter_new) 4. Store the adapter (xa_store)

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 0f0023c649c7bc50543fbe6e1801eb6357b8bd63 to before 7b9269de9815fc34d93dab90bd5169bacbe78e70Affected
  • 0f0023c649c7bc50543fbe6e1801eb6357b8bd63 to before 794abb265de3e792167fe3ea0440c064c722bb84Affected
  • 0f0023c649c7bc50543fbe6e1801eb6357b8bd63 to before 2db687f3469dbc5c59bc53d55acafd75d530b497Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.54 through 6.12.*Not affected
  • 6.17.4 through 6.17.*Not affected
  • 6.18 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.