CVE-2026-53289: ice: fix NULL pointer dereference in ice_reset_all_vfs()
ice: fix NULL pointer dereference in iceresetallvfs()
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.143.1-1 - Upgrade
Upgrade
Linux kernel (ice driver)to a version that resolves this vulnerability.Patch ice: fix NULL pointer dereference in ice_reset_all_vfs() - Configuration
Apply the kernel/driver fix so ice_reset_all_vfs() checks the return value of ice_vf_rebuild_vsi() and does not unconditionally proceed to ice_vf_post_vsi_rebuild() after a failed VSI rebuild (prevents NULL dereference of vsi->txq_map / rxq_map).
ice (Intel Ethernet) SR-IOV / VF reset path ice_reset_all_vfs() return-value handling = check return value and avoid subsequent steps on failure (skip ice_vf_post_vsi_rebuild() when ice_vf_rebuild_vsi() fails) - Compensating control
If VF VSI rebuild fails, use sysfs reset or driver rebind to recover, since the patch note states it does not prevent the VF VSI rebuild from failing.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-53289?
CVE-2026-53289 has a medium severity rating of 5.5 according to the CVSS 3.1 scoring system.
How do I fix CVE-2026-53289?
To fix CVE-2026-53289, make sure your system is updated to the latest version of the Linux kernel that includes the patch addressing this vulnerability.
What type of vulnerability is CVE-2026-53289?
CVE-2026-53289 is classified as a Null Pointer Dereference vulnerability.
Which software is affected by CVE-2026-53289?
CVE-2026-53289 affects the Linux kernel and Microsoft azl3 kernel versions 6.6.139.1-1.
What does CVE-2026-53289 impact in the Linux kernel?
CVE-2026-53289 impacts the ice_reset_all_vfs() function, leading to potential system instability if not handled properly.