Memory Leak Vulnerability in Linux Kernel ICE Driver

CVE-2025-21981

What is CVE-2025-21981?

A vulnerability in the Linux kernel's ICE driver was identified involving a failure to properly manage memory during the aRFS (accelerated Receive Flow Steering) processes. In scenarios where VSI (Virtual Station Interface) reconfiguration occurs post-reset, the system allocates memory for aRFS structures without releasing previously allocated resources. This oversight results in unreferenced memory objects that accumulate over time, ultimately leading to performance degradation and potential instability. The issue has been addressed to prevent future leaks.

References