Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-23389

ice: Fix memory leak in ice_set_ringparam()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings are allocated before rx_rings. If the allocation of rx_rings fails, the code jumps to the done label leaking both tx_rings and xdp_rings. Furthermore, if the setup of an individual Rx ring fails during the loop, the code jumps to the free_tx label which releases tx_rings but leaks xdp_rings. Fix this by introducing a free_xdp label and updating the error paths to ensure both xdp_rings and tx_rings are properly freed if rx_rings allocation or setup fails. Compile tested only. Issue found using a prototype static analysis tool and code review.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < bddf04e3822e4fa38691433dd0750420d49a0dd6affected
  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < e0c211a0c26159058303712d6b4fbd1c88835e6daffected
  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < b23282218eca27b710111460b4964c8a456c6c44affected
  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < 63dc317dfcd3faffd082c2bf3080f9ad070273daaffected
  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < 44ba32a892b72de3faa04b8cfb1f2f1418fdd580affected
  • fcea6f3da546b93050f3534aadea7bd96c1d7349 to < fe868b499d16f55bbeea89992edb98043c9de416affected

Linux Linux

Default version status: affected

  • 4.17affected
  • 0 to < 4.17unaffected
  • 6.1.175 to ≤ 6.1.*unaffected
  • 6.6.136 to ≤ 6.6.*unaffected
  • 6.12.81 to ≤ 6.12.*unaffected
  • 6.18.22 to ≤ 6.18.*unaffected
  • 6.19.7 to ≤ 6.19.*unaffected
  • 7.0 to ≤ *unaffected

References