CVE-2026-68133: ice: fix PTP Call Trace during PTP release
In the Linux kernel, the following vulnerability has been resolved:
ice: fix PTP Call Trace during PTP release
If a PF reset occurs when the PTP state is ICEPTPUNINIT, then iceptprebuild() will update the state to ICEPTPERROR. This will result in the following PTP release call trace during driver unload:
kernel BUG at lib/listdebug.c:52! iceptprelease+0x332/0x3c0 [ice] icedeinitfeatures.part.0+0x10e/0x120 [ice] iceremove+0x100/0x220 [ice]
This was observed when passing PF1 through to a VM. iceptpinit() fails because ctrlpf is NULL and sets the state to ICEPTPUNINIT.
Fix by detecting the ICEPTPUNINIT state in iceptprebuild() and returning without error, preventing the invalid state transition to ICEPTPERROR. The only valid path to ICEPTPERROR is from ICEPTPRESETTING after a failed rebuild.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68133?
CVE-2026-68133 has a risk score of 27, indicating a moderate severity level.
How do I fix CVE-2026-68133?
To fix CVE-2026-68133, update the Linux kernel to the latest version that includes the patch for this vulnerability.
What systems are affected by CVE-2026-68133?
CVE-2026-68133 affects systems running the Linux kernel where the ice driver is used.
What are the consequences of CVE-2026-68133 if not mitigated?
If left unmitigated, CVE-2026-68133 can lead to PTP call trace issues during a PF reset.
Is there a workaround for CVE-2026-68133?
Currently, there is no documented workaround for CVE-2026-68133; applying the kernel update is recommended.