SB20260812404 - Out-of-bounds write in Linux kernel intel ice driver

Description

This security bulletin contains information about 1 vulnerability.

1) Out-of-bounds write (CVE-ID: CVE-2026-68128)

CWE-ID: CWE-787 - Out-of-bounds write

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a remote user to cause a denial of service.

The vulnerability exists due to an out-of-bounds write in ice_parser_profile_init when processing a crafted VIRTCHNL_OP_ADD_RSS_CFG request with an out-of-range ptype value. A remote user can send a specially crafted VIRTCHNL request to cause a denial of service.

The issue can be triggered by a malicious VF supplying a ptype value greater than or equal to 1024, which can lead to a kernel page fault.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/33cc15aaf2491166dddc018b24b3b7db53ec01b2
• https://git.kernel.org/stable/c/59abb87159c53605c063f6e2ceb215b5eba43ee6
• https://git.kernel.org/stable/c/5e496f2b615cec4b45537cfb5b54f36a51dc8753
• https://git.kernel.org/stable/c/fe2f8d5a77adea38e889fe3d6cde1b76d4a635bf