CVE-2026-23389: ice: Fix memory leak in ice_set_ringparam()
In the Linux kernel, the following vulnerability has been resolved:
ice: Fix memory leak in icesetringparam()
In icesetringparam, txrings and xdprings are allocated before rxrings. If the allocation of rxrings fails, the code jumps to the done label leaking both txrings and xdprings. Furthermore, if the setup of an individual Rx ring fails during the loop, the code jumps to the freetx label which releases txrings but leaks xdprings.
Fix this by introducing a freexdp label and updating the error paths to ensure both xdprings and txrings are properly freed if rxrings allocation or setup fails.
Compile tested only. Issue found using a prototype static analysis tool and code review.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In ice_set_ringparam, introduce a free_xdp cleanup label and update all allocation/setup failure paths so xdp_rings and tx_rings are freed when rx_rings allocation or individual Rx ring setup fails.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23389?
CVE-2026-23389 has been classified as a high-severity vulnerability due to the potential for memory leaks in the Linux kernel.
How do I fix CVE-2026-23389?
To fix CVE-2026-23389, it is recommended to update to the patched version of the Intel ice Linux kernel driver.
What type of vulnerability is CVE-2026-23389?
CVE-2026-23389 is a memory leak vulnerability that affects the allocation process in the ice kernel driver.
Which systems are affected by CVE-2026-23389?
CVE-2026-23389 affects systems utilizing the Intel ice Linux kernel driver.
Can CVE-2026-23389 lead to system instability?
Yes, CVE-2026-23389 can potentially lead to system instability due to resource exhaustion from memory leaks.