NULL Pointer Dereference in Linux Kernel's Ice Network Driver

CVE-2026-53289

What is CVE-2026-53289?

A vulnerability exists in the Ice network driver within the Linux kernel, specifically related to the ice_reset_all_vfs() function. When the VSI (Virtual Switch Interface) rebuild fails, important return values are ignored, leading to a NULL pointer dereference during an invocation of ice_vf_post_vsi_rebuild(). This fault can occur after a failed VLAN redesign requiring a network firmware update, causing kernel instability and potential crashes. The resolution applied ensures that failures in rebuilding the VSI do not result in an unsafe state, enhancing system reliability during network operations.

References