CVE-2026-68292: ice: prevent tstamp ring allocation for non-PF VSI types

Published Aug 10, 2026
·
Updated

In the Linux kernel, the following vulnerability has been resolved:

ice: prevent tstamp ring allocation for non-PF VSI types

The pf->txtimetxqs bitmap tracks which Tx queues have ETF (Earliest TxTime First) offload enabled. This bitmap is indexed by queue number and is set by iceoffloadtxtime(), which only operates on PF VSI queues.

However, iceistxtimeena() does not check the VSI type before consulting the bitmap. When ETF offload is enabled on PF Tx queue 0, bit 0 is set in pf->txtimetxqs. During a subsequent PCI reset rebuild, the CTRL VSI's Tx queue 0 is reconfigured and iceistxtimeena() is called for that ring. Since it only checks pf->txtimetxqs by queue index without distinguishing VSI type, it finds bit 0 set and returns true, matching the PF VSI's ETF queue, not the CTRL VSI's. This causes icevsicfgtxq() to spuriously allocate a tstampring for the CTRL VSI ring.

Since CTRL VSI rings have no associated netdev, icecleantxring() takes an early return at the !netdev check before reaching icefreetxtstampring(), leaking the allocation. Each PCI reset leaks one 64-byte tstampring.

Fix this by restricting iceistxtimeena() to return true only for PF VSI rings, since txtimetxqs is only meaningful for PF VSI queues.

Affected Software

1 affected component
Intel Linux kernel

Event History

Aug 10, 2026
CVE Published
via MITRE·12:02 PM
Data Sourced
via MITRE·12:02 PM
Description
Data Sourced
via NVD·01:20 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is the severity of CVE-2026-68292?

CVE-2026-68292 has a severity rating of 10, indicating a critical vulnerability.

2

How do I fix CVE-2026-68292?

To fix CVE-2026-68292, ensure you update to the latest version of the Linux kernel that resolves this vulnerability.

3

What systems are affected by CVE-2026-68292?

CVE-2026-68292 affects systems running the vulnerable versions of the Linux kernel, particularly those with ice driver implementations.

4

What type of vulnerability is CVE-2026-68292?

CVE-2026-68292 is a kernel vulnerability that involves improper handling of timestamp ring allocations for non-PF VSI types.

5

What could happen if CVE-2026-68292 is exploited?

If exploited, CVE-2026-68292 could lead to system instability or denial of service due to incorrect queue management.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203