Linux Kernel Vulnerability in ice Adapter from Intel

CVE-2025-40185

What is CVE-2025-40185?

A resource management flaw exists in the Intel ice adapter within the Linux kernel. When the ice_adapter_new() function fails during the allocation of an adapter, the reserved XArray entry created by xa_insert() is not properly released. As a result, attempts to insert additional entries at the same index lead to an -EBUSY error, which can subsequently cause NULL pointer dereferences. To mitigate this issue, a reordering of operations is recommended: first check if the adapter exists, reserve the XArray slot, then allocate the adapter and finally store the adapter.

References