CVE-2026-72425

High

Description

In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in ice_reset_all_vfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using ice_vf_ctrl_vsi_release() instead of ice_vf_ctrl_invalidate_vsi() which aligns behavior with the ice_reset_vf() function. Reproduction: echo 1 > /sys/class/net/$pf/device/sriov_numvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset

SeverityHigh
CVSS7.1
Exploit probability—
ProductLinux
PublishedAug 15, 2026
First seenAug 15, 2026

How to fix

Update
  • Linux Linuxb409a9dc37db8bd798122fc5bcdcfaccaf80db1e, 335c2dd21ad9d520102906f96edb99fd5e89ac32, 87a042e45bf4870dc75ea05b4fc0286abecb2a4d, dd6d8e4412f805937f61f00bbfdfe831978be235, b1fc5bafbc5f84df457b6f987ac993e0802f8d93, ebbe8868cf473f698e0fbaf436d2618b2bcda806 or later

Affected products

ProductAffected versionsFixed in
Linux Linuxda62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < b409a9dc37db8bd798122fc5bcdcfaccaf80db1e, da62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < 335c2dd21ad9d520102906f96edb99fd5e89ac32, da62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < 87a042e45bf4870dc75ea05b4fc0286abecb2a4d, da62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < dd6d8e4412f805937f61f00bbfdfe831978be235, da62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < b1fc5bafbc5f84df457b6f987ac993e0802f8d93, da62c5ff9dcdac67204d6647f3cd43ad931a59f4 ≤ v < ebbe8868cf473f698e0fbaf436d2618b2bcda806, 5.13b409a9dc37db8bd798122fc5bcdcfaccaf80db1e, 335c2dd21ad9d520102906f96edb99fd5e89ac32, 87a042e45bf4870dc75ea05b4fc0286abecb2a4d, dd6d8e4412f805937f61f00bbfdfe831978be235, b1fc5bafbc5f84df457b6f987ac993e0802f8d93, ebbe8868cf473f698e0fbaf436d2618b2bcda806

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.