Live › vulnerability › CVE-2026-99044
Go to dashboardThe Linux kernel's ice network driver frees a VSI structure before reading its index to remove a dynamic port entry, which is a use-after-free. The sources do not say what an attacker gains from triggering it.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Systems running a Linux kernel with the Intel ice driver on hardware that supports dynamic port creation, typically hosts that use the ice driver's dynamic port feature. Hosts without Intel ice hardware or without the driver loaded are not affected. The sources do not say which configurations trigger the cleanup path.
No product ranges from the sources yet.
uname -r to see the running kernel versionice driver is loaded with lsmod | grep ice on hosts with Intel Ethernet adaptersEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
ice: fix use-after-free in dynamic port cleanup
ice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase the dynamic port from pf->dyn_ports. However, it frees the VSI before reading the index for the erase, resulting in a use-after-free.
Follow the reverse of the allocation order in ice_alloc_dynamic_port() by erasing the xarray entry before freeing the VSI.
This page as .md · .json · in your agent: get_signal("CVE-2026-99044")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.