Linux Kernel Tx Scheduler Vulnerability in Intel's Ice Driver

CVE-2025-38127

What is CVE-2025-38127?

In the Intel Ice driver for the Linux kernel, a vulnerability exists in the XDP callback related to the transmission (Tx) scheduler. When new Tx queues are added, the callback must properly update the scheduler. However, a flaw prevented the rollback of changes in the event of a scheduler failure, leading to critical system crashes. This issue requires effective unmapping of XDP queues from q_vectors and proper handling of the XDP rings pointer to ensure system stability during operation. Immediate exit from the callback upon failure is also necessary to prevent unintended side effects.

References