PT-2026-8161 · Linux+1 · Linux Kernel+1
Published
2026-01-01
·
Updated
2026-05-22
·
CVE-2026-23166
CVSS v3.1
5.5
Medium
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel versions prior to 6.18
Description
The Linux kernel contained a flaw within the ice network driver where a NULL pointer dereference could occur in the
ice vsi set napi queues() function during resume from suspend. This issue could lead to system crashes when rings[q idx]->q vector is NULL. The problem was reproducible in both disabled and enabled SR-IOV states. The fix adds NULL pointer checks to prevent crashes during resume from suspend.Recommendations
Update to version 6.18 or later to address this issue.
Exploit
Fix
NULL Pointer Dereference
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Ubuntu