CVE-2026-72425

ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

State: Published
Severity: 7.1 High
Published: Aug 15, 2026
Updated: Oct 16, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function.

Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset

Scores

CVSS	Score	Vector	Source
3.1	7.1 High	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H	Linux

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before b409a9dc37db8bd798122fc5bcdcfaccaf80db1eAffected da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before 335c2dd21ad9d520102906f96edb99fd5e89ac32Affected da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before 87a042e45bf4870dc75ea05b4fc0286abecb2a4dAffected da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before dd6d8e4412f805937f61f00bbfdfe831978be235Affected da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before b1fc5bafbc5f84df457b6f987ac993e0802f8d93Affected da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before ebbe8868cf473f698e0fbaf436d2618b2bcda806Affected
LinuxLinux	5.13Affected before 5.13Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.*Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before b409a9dc37db8bd798122fc5bcdcfaccaf80db1eAffected
da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before 335c2dd21ad9d520102906f96edb99fd5e89ac32Affected
da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before 87a042e45bf4870dc75ea05b4fc0286abecb2a4dAffected
da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before dd6d8e4412f805937f61f00bbfdfe831978be235Affected
da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before b1fc5bafbc5f84df457b6f987ac993e0802f8d93Affected
da62c5ff9dcdac67204d6647f3cd43ad931a59f4 to before ebbe8868cf473f698e0fbaf436d2618b2bcda806Affected

LinuxLinux

5.13Affected
before 5.13Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.