CVE-2026-99044
ice: fix use-after-free in dynamic port cleanup
Fetching some sources has been requested. Reload in about a minute to see them.
CVSS v3.1 (listed by NVD)
—
Not scored
CVSS v4.0 (listed by NVD)
—
Not scored
CVSS (listed by CVE.org)
—
Not scored
EPSS exploit probability
0.2%
Percentile 10.5%
as of 2026-10-24
CISA KEV
—
Not listed
Description
NVD
In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup ice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase the dynamic port from pf->dyn_ports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-free. Follow the reverse of the allocation order in ice_alloc_dynamic_port() by erasing the xarray entry before freeing the VSI.
Affected products and packages
CNA (CVE.org)
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | affected: eda69d654c7edae21312f731e0308941cb2ee2a9 … < 7c1344df1ae0579f57b97647e5203b06496ce10c affected: eda69d654c7edae21312f731e0308941cb2ee2a9 … < ca8a6285b11d01e5a279b1aa7fb55b1a02ecebb1 affected: eda69d654c7edae21312f731e0308941cb2ee2a9 … < b98eb58ba2f8fe8e9bba1b8a3b94fa5602c6de84 affected: eda69d654c7edae21312f731e0308941cb2ee2a9 … < 1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ff default: unaffected |
| Linux | Linux | affected: 6.12 unaffected: 0 … < 6.12 unaffected: 6.12.114 … <= 6.12.* unaffected: 6.18.57 … <= 6.18.* unaffected: 7.2.11 … <= 7.2.* unaffected: 7.3 … <= * default: affected |
Open-source packages (GitHub Advisory / OSV)
CVE-2026-99044
OSV
ice: fix use-after-free in dynamic port cleanup
| Ecosystem | Package | Affected versions | Fixed in |
|---|---|---|---|
| >= eda69d654c7edae21312f731e0308941cb2ee2a9, < 7c1344df1ae0579f57b97647e5203b06496ce10c; < ca8a6285b11d01e5a279b1aa7fb55b1a02ecebb1; < b98eb58ba2f8fe8e9bba1b8a3b94fa5602c6de84; < 1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ff | 7c1344df1ae0579f57b97647e5203b06496ce10c, ca8a6285b11d01e5a279b1aa7fb55b1a02ecebb1, b98eb58ba2f8fe8e9bba1b8a3b94fa5602c6de84, 1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ff | ||
| Linux | Kernel | >= 6.12.0, < 6.12.114; >= 6.13.0, < 6.18.57; >= 6.19.0, < 7.2.11 | 6.12.114, 6.18.57, 7.2.11 |
Linux distribution status
References (7)
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git OSV
- https://git.kernel.org/stable/c/1402fc67d2f4e2e1fc7bf8ee0825b8ad994557ff NVD, CNA, OSV
- https://git.kernel.org/stable/c/7c1344df1ae0579f57b97647e5203b06496ce10c NVD, CNA, OSV
- https://git.kernel.org/stable/c/b98eb58ba2f8fe8e9bba1b8a3b94fa5602c6de84 NVD, CNA, OSV
- https://git.kernel.org/stable/c/ca8a6285b11d01e5a279b1aa7fb55b1a02ecebb1 NVD, CNA, OSV
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99044.json OSV
- https://nvd.nist.gov/vuln/detail/CVE-2026-99044 OSV