Skip to content
Not rated

CVE-2026-23389 ice: Fix memory leak in ice_set_ringparam()

Description

In the Linux kernel, the following vulnerability has been resolved: ice: Fix memory leak in ice_set_ringparam() In ice_set_ringparam, tx_rings and xdp_rings are allocated before rx_rings. If the allocation of rx_rings fails, the code jumps to the done label leaking both tx_rings and xdp_rings. Furthermore, if the setup of an individual Rx ring fails during the loop, the code jumps to the free_tx label which releases tx_rings but leaks xdp_rings. Fix this by introducing a free_xdp label and updating the error paths to ensure both xdp_rings and tx_rings are properly freed if rx_rings allocation or setup fails. Compile tested only. Issue found using a prototype static analysis tool and code review.

Affected products and versions

Product Affected versions Fixed in
Linux 7.0 earliest → < 7.0 7.0
Linux 6.19 earliest → < 6.19.7 6.19.7
Linux 6.18 earliest → < 6.18.22 6.18.22
Linux 6.12 earliest → < 6.12.81 6.12.81
Linux 6.6 earliest → < 6.6.136 6.6.136
Linux 6.1 earliest → < 6.1.175 6.1.175
Linux 4.17 No fix stated
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Versions not published
The 18286 CVEs of Linux →
Track this CVE