CVE-2026-72425

HighCVSS 7.1/10Last modified Oct 16, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs()

Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function.

Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < b409a9dc37db8bd798122fc5bcdcfaccaf80db1e; >= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < 335c2dd21ad9d520102906f96edb99fd5e89ac32; >= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < 87a042e45bf4870dc75ea05b4fc0286abecb2a4d; >= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < dd6d8e4412f805937f61f00bbfdfe831978be235; >= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < b1fc5bafbc5f84df457b6f987ac993e0802f8d93; >= da62c5ff9dcdac67204d6647f3cd43ad931a59f4, < ebbe8868cf473f698e0fbaf436d2618b2bcda806
LinuxLinux5.13

References

Timeline

Published
Aug 15, 2026
Last modified
Oct 16, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-724268.4In the Linux kernel, the following vulnerability has been resolved: bpf: Preserve pointer spill metadata during half-slot cleanup __clean_CVE-2026-724277.8In the Linux kernel, the following vulnerability has been resolved: bpf: Fix effective prog array index with BPF_F_PREORDER replace_effectCVE-2026-72428In the Linux kernel, the following vulnerability has been resolved: bpf: Fix stack slot index in nospec checks check_stack_write_fixed_offCVE-2026-724299.8In the Linux kernel, the following vulnerability has been resolved: ipv6: ioam: fix type confusion of dst_entry IOAM uses a dummy dst_entrCVE-2026-72439.8A vulnerability was identified in Totolink A8000RU 7.1cu.643_b20200521. The affected element is the function setRadvdCfg of the file /cgi-biCVE-2026-72430In the Linux kernel, the following vulnerability has been resolved: net/sched: act_ct: fix nf_connlabels leak on two error paths tcf_ct_fiCVE-2026-72431In the Linux kernel, the following vulnerability has been resolved: alloc_tag: fix use-after-free in /proc/allocinfo after module unload aCVE-2026-72432In the Linux kernel, the following vulnerability has been resolved: tpm_crb: Check ACPI_COMPANION() against NULL during probe Every platfoCVE-2026-72433In the Linux kernel, the following vulnerability has been resolved: netfilter: nft_meta_bridge: fix NFT_META_BRI_IIFPVID stack leak This nCVE-2026-724347.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: make sure gc is properly stopped Sashiko noticed thaCVE-2026-724357.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: fix order of kfree_rcu() and rcu_assign_pointer() SaCVE-2026-724369.8In the Linux kernel, the following vulnerability has been resolved: netfilter: ipset: Don't use test_bit() in lockless RCU readers in hash
CVE-2026-72425: High severity, CVSS 7.1 | Vulnix