kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

kernel: Linux kernel (ice): Denial of Service via out-of-range ptype in VIRTCHNL

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

CVE-2026-80693

CVE-2026-80693 is an out-of-bounds write in the Linux kernel's idpf (Intel DPA) network driver. The function idpf_get_reg_intr_vecs() fills a reg_vals[] array using per-chunk num_vectors from a VIRTCHNL2_OP_ALLOC_VECTORS reply, but the array size is based on caps.num_allocated_vectors. Since the ...

SUSE CVE-2026-68128

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

Linux Distros Unpatched Vulnerability : CVE-2026-68128

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operate...

CVE-2026-68128

A flaw was found in the Linux kernel's ice driver. A malicious virtual function VF can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service DoS...

UBUNTU-CVE-2026-68128

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

CVE-2026-68128

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

EUVD-2026-55509

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

CVE-2026-68128 ice: reject out-of-range ptype in ice_parser_profile_init

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

CVE-2026-68128: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ice: reject out-of-range ptype in iceparserprofileinit setbitrslt-ptype, prof-ptypes operates on a DECLAREBITMAP of ICEFLOWPTYPEMAX 1024 bits. Nothing prevents a malicious VF from providing ptype = 1024 through VIRTCHNL, resultin...

PT-2026-69528

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc1 Description An issue exists in the ice parser profile init function where the system fails to validate the ptype value provided through VIRTCHNL. Because the set bit operation uses a bitmap with a maximum size of...

kernel: idpf: convert control queue mutex to a spinlock

In the Linux kernel, the following vulnerability has been resolved: idpf: convert control queue mutex to a spinlock With VIRTCHNL2CAPMACFILTER enabled, the following warning is generated on module load: 324.701677 BUG: sleeping function called from invalid context at kernel/locking/mutex.c:578...

PT-2025-16757

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, specifically in the ice vc fdir parse raw function. The issue involved using an untrusted value of pkt len without proper...

CVE-2024-53064 idpf: fix idpf_vc_core_init error path

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

CVE-2024-53064: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: idpf: fix idpfvccoreinit error path In an event where the platform running the device control plane is rebooted, reset is detected on the driver. It releases all the resources and waits for the reset to complete. Once the reset i...

PT-2024-35528

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been identified, specifically in the idpf vc core init error path. When the platform running the device control plane is rebooted, the driver...

CVE-2022-48941

In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 "ice: Stop processing VF messages during teardown" introduced a driver state flag, ICEVFDEINITINPROGRESS, which is intended to prevent some issues with concurrently...

CVE-2022-48941

In the Linux kernel, the following vulnerability has been resolved: ice: fix concurrent reset and removal of VFs Commit c503e63200c6 "ice: Stop processing VF messages during teardown" introduced a driver state flag, ICEVFDEINITINPROGRESS, which is intended to prevent some issues with concurrently...