Home

Description

In the Linux kernel, the following vulnerability has been resolved: ice: ice_adapter: release xa entry on adapter allocation failure When ice_adapter_new() fails, the reserved XArray entry created by xa_insert() is not released. This causes subsequent insertions at the same index to return -EBUSY, potentially leading to NULL pointer dereferences. Reorder the operations as suggested by Przemek Kitszel: 1. Check if adapter already exists (xa_load) 2. Reserve the XArray slot (xa_reserve) 3. Allocate the adapter (ice_adapter_new) 4. Store the adapter (xa_store)

PUBLISHED Reserved 2025-04-16 | Published 2025-11-12 | Updated 2025-11-12 | Assigner Linux

Product status

Default status
unaffected

0f0023c649c7bc50543fbe6e1801eb6357b8bd63 (git) before 7b9269de9815fc34d93dab90bd5169bacbe78e70
affected

0f0023c649c7bc50543fbe6e1801eb6357b8bd63 (git) before 794abb265de3e792167fe3ea0440c064c722bb84
affected

0f0023c649c7bc50543fbe6e1801eb6357b8bd63 (git) before 2db687f3469dbc5c59bc53d55acafd75d530b497
affected

Default status
affected

6.11
affected

Any version before 6.11
unaffected

6.12.54 (semver)
unaffected

6.17.4 (semver)
unaffected

6.18-rc1 (original_commit_for_fix)
unaffected

References

git.kernel.org/...c/7b9269de9815fc34d93dab90bd5169bacbe78e70

git.kernel.org/...c/794abb265de3e792167fe3ea0440c064c722bb84

git.kernel.org/...c/2db687f3469dbc5c59bc53d55acafd75d530b497

cve.org (CVE-2025-40185)

nvd.nist.gov (CVE-2025-40185)

Download JSON