Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CVE-2025-21981: Linux kernel memory leak in ice driver after reset
CVE-2025-21981 · published 1 year ago
Summary
The ice network driver in the Linux kernel could keep allocating memory each time the device is reset, eventually using up system memory. This affects standard Linux kernel packages such as the mainline kernel and the Canonical HWE, AWS, and Azure builds. Install the latest kernel updates, which include a check that prevents the duplicate allocation.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1086.93~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1091.100~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1085.94~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-142.152~20.04.1.
- Update canonical linux-ibm-5.15 to version 5.15.0-1078.81~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1083.89~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-142.152~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1039.39~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1083.89~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1081.85~20.04.1.
- Update canonical linux to version 5.15.0-142.152.
- Update canonical linux-aws to version 5.15.0-1086.93.
- Update canonical linux-aws-6.8 to version 6.8.0-1039.41~22.04.1.
- Update canonical linux-azure to version 5.15.0-1091.100.
- Update canonical linux-azure-6.8 to version 6.8.0-1036.42~22.04.1.
- Update canonical linux-gcp to version 5.15.0-1085.94.
- Update canonical linux-gcp-6.8 to version 6.8.0-1040.42~22.04.1.
- Update canonical linux-gke to version 5.15.0-1083.89.
- Update canonical linux-gkeop to version 5.15.0-1068.76.
- Update canonical linux-hwe-6.8 to version 6.8.0-85.85~22.04.1.
- Update canonical linux-ibm to version 5.15.0-1078.81.
- Update canonical linux-ibm-6.8 to version 6.8.0-1037.37~22.04.1.
- Update canonical linux-intel-iotg to version 5.15.0-1081.87.
- Update canonical linux-kvm to version 5.15.0-1082.87.
- Update canonical linux-lowlatency to version 5.15.0-142.152.
- Update canonical linux-lowlatency-hwe-6.8 to version 6.8.0-84.84.1~22.04.1.
- Update canonical linux-nvidia to version 5.15.0-1080.81.
- Update canonical linux-nvidia-6.8 to version 6.8.0-1039.42~22.04.1.
- Update canonical linux-nvidia-tegra to version 5.15.0-1039.39.
- Update canonical linux-nvidia-tegra-igx to version 5.15.0-1028.28.
- Update canonical linux-oracle to version 5.15.0-1083.89.
- Update canonical linux-oracle-6.8 to version 6.8.0-1037.38~22.04.1.
- Update canonical linux-raspi to version 5.15.0-1080.83.
- Update canonical linux-riscv-6.8 to version 6.8.0-84.84~22.04.1.
- Update canonical linux-xilinx-zynqmp to version 5.15.0-1050.54.
- Update canonical linux-bluefield to version 5.15.0-1069.71.
- Update canonical linux-aws-fips to version 5.15.0-1086.93+fips1.
- Update canonical linux-azure-fips to version 5.15.0-1091.100+fips1.
- Update canonical linux-fips to version 5.15.0-142.152+fips1.
- Update canonical linux-gcp-fips to version 5.15.0-1085.94+fips1.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1079.81.
- Update canonical linux-realtime to version 5.15.0-1086.95.
- Update canonical linux-realtime-6.8 to version 6.8.1-1034.35~22.04.1.
- Update canonical linux to version 6.8.0-84.84.
- Update canonical linux-aws to version 6.8.0-1039.41.
- Update canonical linux-azure to version 6.8.0-1038.44.
- Update canonical linux-azure-6.11 to version 6.11.0-1018.18~24.04.1.
- Update canonical linux-azure-nvidia to version 6.8.0-1025.27.
- Update canonical linux-gcp to version 6.8.0-1040.42.
- Update canonical linux-gcp-6.11 to version 6.11.0-1016.16~24.04.1.
- Update canonical linux-gke to version 6.8.0-1036.40.
- Update canonical linux-gkeop to version 6.8.0-1023.25.
- Update canonical linux-hwe-6.11 to version 6.11.0-28.28~24.04.1.
- Update canonical linux-ibm to version 6.8.0-1037.37.
- Update canonical linux-lowlatency to version 6.8.0-84.84.1.
- Update canonical linux-lowlatency-hwe-6.11 to version 6.11.0-1015.16~24.04.2.
- Update canonical linux-nvidia to version 6.8.0-1039.42.
- Update canonical linux-nvidia-6.11 to version 6.11.0-1012.12.
- Update canonical linux-nvidia-lowlatency to version 6.8.0-1039.42.1.
- Update canonical linux-nvidia-tegra to version 6.8.0-1010.10.
- Update canonical linux-oem-6.11 to version 6.11.0-1024.24.
- Update canonical linux-oracle to version 6.8.0-1037.38.
- Update canonical linux-raspi to version 6.8.0-1039.43.
- Update canonical linux-aws-fips to version 6.8.0-1039.41+fips1.
- Update canonical linux-azure-fips to version 6.8.0-1040.46+fips1.
- Update canonical linux-fips to version 6.8.0-84.84+fips1.
- Update canonical linux-gcp-fips to version 6.8.0-1040.42+fips1.
- Update canonical linux-raspi-realtime to version 6.8.0-2030.31.
- Update canonical linux-realtime to version 6.8.1-1034.35.
- Update canonical linux to version 6.8.0-138.138.aikido.87.
- Update canonical rootio-linux to version 6.8.0-138.138.aikido.87.
- Update canonical linux-azure-fde to version 5.15.0-1091.100.1.
- Update canonical linux-xilinx to version 6.8.0-1018.19.
- Update linux to version 6.8.0-146.146.aikido.89.
- Update rootio-linux to version 6.8.0-146.146.aikido.89.
- Update linux to version 6.8.0-147.147.aikido.90.
- Update rootio-linux to version 6.8.0-147.147.aikido.90.
- Update linux kernel to version 6.13.8.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | linux | linux_kernel |
>= 5.8, < 6.1.132 >= 6.2, < 6.6.84 >= 6.7, < 6.12.20 >= 6.13, < 6.13.8 6.14 cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* |
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1086.93~20.04.1 Fix: upgrade to 5.15.0-1086.93~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1091.100~20.04.1 Fix: upgrade to 5.15.0-1091.100~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1085.94~20.04.1 Fix: upgrade to 5.15.0-1085.94~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-142.152~20.04.1 Fix: upgrade to 5.15.0-142.152~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-ibm-5.15 |
< 5.15.0-1078.81~20.04.1 Fix: upgrade to 5.15.0-1078.81~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1083.89~20.04.1 Fix: upgrade to 5.15.0-1083.89~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-142.152~20.04.1 Fix: upgrade to 5.15.0-142.152~20.04.1
|
| Ubuntu:Pro:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1039.39~20.04.1 Fix: upgrade to 5.15.0-1039.39~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1083.89~20.04.1 Fix: upgrade to 5.15.0-1083.89~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
Showing 50 of 161. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1081.85~20.04.1 Fix: upgrade to 5.15.0-1081.85~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-142.152 Fix: upgrade to 5.15.0-142.152
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1086.93 Fix: upgrade to 5.15.0-1086.93
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.8 |
< 6.8.0-1039.41~22.04.1 Fix: upgrade to 6.8.0-1039.41~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1091.100 Fix: upgrade to 5.15.0-1091.100
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.8 |
< 6.8.0-1036.42~22.04.1 Fix: upgrade to 6.8.0-1036.42~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1085.94 Fix: upgrade to 5.15.0-1085.94
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.8 |
< 6.8.0-1040.42~22.04.1 Fix: upgrade to 6.8.0-1040.42~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1083.89 Fix: upgrade to 5.15.0-1083.89
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1068.76 Fix: upgrade to 5.15.0-1068.76
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.8 |
< 6.8.0-85.85~22.04.1 Fix: upgrade to 6.8.0-85.85~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1078.81 Fix: upgrade to 5.15.0-1078.81
|
| Ubuntu:22.04:LTS | canonical | linux-ibm-6.8 |
< 6.8.0-1037.37~22.04.1 Fix: upgrade to 6.8.0-1037.37~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1081.87 Fix: upgrade to 5.15.0-1081.87
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1082.87 Fix: upgrade to 5.15.0-1082.87
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-142.152 Fix: upgrade to 5.15.0-142.152
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.8 |
< 6.8.0-84.84.1~22.04.1 Fix: upgrade to 6.8.0-84.84.1~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1080.81 Fix: upgrade to 5.15.0-1080.81
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.8 |
< 6.8.0-1039.42~22.04.1 Fix: upgrade to 6.8.0-1039.42~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra |
< 5.15.0-1039.39 Fix: upgrade to 5.15.0-1039.39
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-tegra-igx |
< 5.15.0-1028.28 Fix: upgrade to 5.15.0-1028.28
|
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1083.89 Fix: upgrade to 5.15.0-1083.89
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.8 |
< 6.8.0-1037.38~22.04.1 Fix: upgrade to 6.8.0-1037.38~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1080.83 Fix: upgrade to 5.15.0-1080.83
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.8 |
< 6.8.0-84.84~22.04.1 Fix: upgrade to 6.8.0-84.84~22.04.1
|
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-xilinx-zynqmp |
< 5.15.0-1050.54 Fix: upgrade to 5.15.0-1050.54
|
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1069.71 Fix: upgrade to 5.15.0-1069.71
|
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-aws-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-azure-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-fips | All versions |
| Ubuntu:Pro:FIPS-preview:22.04:LTS | canonical | linux-gcp-fips | All versions |
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-aws-fips |
< 5.15.0-1086.93+fips1 Fix: upgrade to 5.15.0-1086.93+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-azure-fips |
< 5.15.0-1091.100+fips1 Fix: upgrade to 5.15.0-1091.100+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-fips |
< 5.15.0-142.152+fips1 Fix: upgrade to 5.15.0-142.152+fips1
|
| Ubuntu:Pro:FIPS-updates:22.04:LTS | canonical | linux-gcp-fips |
< 5.15.0-1085.94+fips1 Fix: upgrade to 5.15.0-1085.94+fips1
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1079.81 Fix: upgrade to 5.15.0-1079.81
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1086.95 Fix: upgrade to 5.15.0-1086.95
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime-6.8 |
< 6.8.1-1034.35~22.04.1 Fix: upgrade to 6.8.1-1034.35~22.04.1
|
| Ubuntu:24.04:LTS | canonical | linux |
< 6.8.0-84.84 Fix: upgrade to 6.8.0-84.84
|
| Ubuntu:24.04:LTS | canonical | linux-aws |
< 6.8.0-1039.41 Fix: upgrade to 6.8.0-1039.41
|
| Ubuntu:24.04:LTS | canonical | linux-azure |
< 6.8.0-1038.44 Fix: upgrade to 6.8.0-1038.44
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 |
< 6.11.0-1018.18~24.04.1 Fix: upgrade to 6.11.0-1018.18~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-azure-nvidia |
< 6.8.0-1025.27 Fix: upgrade to 6.8.0-1025.27
|
| Ubuntu:24.04:LTS | canonical | linux-gcp |
< 6.8.0-1040.42 Fix: upgrade to 6.8.0-1040.42
|
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 |
< 6.11.0-1016.16~24.04.1 Fix: upgrade to 6.11.0-1016.16~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-gke |
< 6.8.0-1036.40 Fix: upgrade to 6.8.0-1036.40
|
| Ubuntu:24.04:LTS | canonical | linux-gkeop |
< 6.8.0-1023.25 Fix: upgrade to 6.8.0-1023.25
|
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 |
< 6.11.0-28.28~24.04.1 Fix: upgrade to 6.11.0-28.28~24.04.1
|
| Ubuntu:24.04:LTS | canonical | linux-ibm |
< 6.8.0-1037.37 Fix: upgrade to 6.8.0-1037.37
|
| Ubuntu:24.04:LTS | canonical | linux-intel | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency |
< 6.8.0-84.84.1 Fix: upgrade to 6.8.0-84.84.1
|
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 |
< 6.11.0-1015.16~24.04.2 Fix: upgrade to 6.11.0-1015.16~24.04.2
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia |
< 6.8.0-1039.42 Fix: upgrade to 6.8.0-1039.42
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 |
< 6.11.0-1012.12 Fix: upgrade to 6.11.0-1012.12
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-lowlatency |
< 6.8.0-1039.42.1 Fix: upgrade to 6.8.0-1039.42.1
|
| Ubuntu:24.04:LTS | canonical | linux-nvidia-tegra |
< 6.8.0-1010.10 Fix: upgrade to 6.8.0-1010.10
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 |
< 6.11.0-1024.24 Fix: upgrade to 6.11.0-1024.24
|
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oracle |
< 6.8.0-1037.38 Fix: upgrade to 6.8.0-1037.38
|
| Ubuntu:24.04:LTS | canonical | linux-raspi |
< 6.8.0-1039.43 Fix: upgrade to 6.8.0-1039.43
|
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:Nvidia-BlueField:24.04:LTS | canonical | linux-bluefield | All versions |
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-aws-fips |
< 6.8.0-1039.41+fips1 Fix: upgrade to 6.8.0-1039.41+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-azure-fips |
< 6.8.0-1040.46+fips1 Fix: upgrade to 6.8.0-1040.46+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-fips |
< 6.8.0-84.84+fips1 Fix: upgrade to 6.8.0-84.84+fips1
|
| Ubuntu:Pro:FIPS-updates:24.04:LTS | canonical | linux-gcp-fips |
< 6.8.0-1040.42+fips1 Fix: upgrade to 6.8.0-1040.42+fips1
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-raspi-realtime |
< 6.8.0-2030.31 Fix: upgrade to 6.8.0-2030.31
|
| Ubuntu:Pro:Realtime:24.04:LTS | canonical | linux-realtime |
< 6.8.1-1034.35 Fix: upgrade to 6.8.1-1034.35
|
| Root:Ubuntu:24.04 | canonical | linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Root:Ubuntu:24.04 | canonical | rootio-linux |
< 6.8.0-138.138.aikido.87 Fix: upgrade to 6.8.0-138.138.aikido.87
|
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1091.100.1 Fix: upgrade to 5.15.0-1091.100.1
|
| Ubuntu:24.04:LTS | canonical | linux-xilinx |
< 6.8.0-1018.19 Fix: upgrade to 6.8.0-1018.19
|
| Root:Ubuntu:24.04 | – | linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Root:Ubuntu:24.04 | – | rootio-linux |
< 6.8.0-146.146.aikido.89 < 6.8.0-147.147.aikido.90 Fix: upgrade to 6.8.0-146.146.aikido.89
|
| Linux | linux | kernel |
>= 6.13.0, < 6.13.8 Fix: upgrade to 6.13.8
|
Original advisory text
ice: fix memory leak in aRFS after reset
In the Linux kernel, the following vulnerability has been resolved:
ice: fix memory leak in aRFS after reset
Fix aRFS (accelerated Receive Flow Steering) structures memory leak by
adding a checker to verify if aRFS memory is already allocated while
configuring VSI. aRFS objects are allocated in two cases:
- as part of VSI initialization (at probe), and
- as part of reset handling
However, VSI reconfiguration executed during reset involves memory
allocation one more time, without prior releasing already allocated
resources. This led to the memory leak with the following signature:
[root@os-delivery ~]# cat /sys/kernel/debug/kmemleak
unreferenced object 0xff3c1ca7252e6000 (size 8192):
comm "kworker/0:0", pid 8, jiffies 4296833052
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace (crc 0):
[<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340
[<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice]
[<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice]
[<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice]
[<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice]
[<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice]
[<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0
[<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20
[<ffffffff98f0b6d9>] process_one_work+0x179/0x390
[<ffffffff98f0c1e9>] worker_thread+0x239/0x340
[<ffffffff98f14abc>] kthread+0xcc/0x100
[<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50
[<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30
...
ice: fix memory leak in aRFS after reset
Fix aRFS (accelerated Receive Flow Steering) structures memory leak by
adding a checker to verify if aRFS memory is already allocated while
configuring VSI. aRFS objects are allocated in two cases:
- as part of VSI initialization (at probe), and
- as part of reset handling
However, VSI reconfiguration executed during reset involves memory
allocation one more time, without prior releasing already allocated
resources. This led to the memory leak with the following signature:
[root@os-delivery ~]# cat /sys/kernel/debug/kmemleak
unreferenced object 0xff3c1ca7252e6000 (size 8192):
comm "kworker/0:0", pid 8, jiffies 4296833052
hex dump (first 32 bytes):
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................
backtrace (crc 0):
[<ffffffff991ec485>] __kmalloc_cache_noprof+0x275/0x340
[<ffffffffc0a6e06a>] ice_init_arfs+0x3a/0xe0 [ice]
[<ffffffffc09f1027>] ice_vsi_cfg_def+0x607/0x850 [ice]
[<ffffffffc09f244b>] ice_vsi_setup+0x5b/0x130 [ice]
[<ffffffffc09c2131>] ice_init+0x1c1/0x460 [ice]
[<ffffffffc09c64af>] ice_probe+0x2af/0x520 [ice]
[<ffffffff994fbcd3>] local_pci_probe+0x43/0xa0
[<ffffffff98f07103>] work_for_cpu_fn+0x13/0x20
[<ffffffff98f0b6d9>] process_one_work+0x179/0x390
[<ffffffff98f0c1e9>] worker_thread+0x239/0x340
[<ffffffff98f14abc>] kthread+0xcc/0x100
[<ffffffff98e45a6d>] ret_from_fork+0x2d/0x50
[<ffffffff98e083ba>] ret_from_fork_asm+0x1a/0x30
...
References
- https://git.kernel.org/stable/c/e6902101f34f098af59b0d1d8cf90c4124c02c6a URL
- https://git.kernel.org/stable/c/ef2bc94059836a115430a6ad9d2838b0b34dc8f5 URL
- https://lists.debian.org/debian-lts-announce/2025/05/msg00030.html URL
- https://lists.debian.org/debian-lts-announce/2025/05/msg00045.html URL
- https://git.kernel.org/stable/c/23d97f18901ef5e4e264e3b1777fe65c760186b5 URL
- https://ubuntu.com/security/CVE-2025-21981 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-21981 Third Party Advisory
- https://git.kernel.org/linus/23d97f18901ef5e4e264e3b1777fe65c760186b5 Third Party Advisory
- https://ubuntu.com/security/notices/USN-7591-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7591-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7591-3 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7592-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7593-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7591-4 Vendor Advisory
- https://git.kernel.org/stable/c/3b27e6e10a32589fcd293b8933ab6de9387a460e URL
- https://ubuntu.com/security/notices/USN-7597-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7597-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7598-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7602-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7605-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7606-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7591-5 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7605-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7628-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7591-6 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7655-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7764-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7765-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7766-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7767-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7779-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7767-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7764-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7790-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7800-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7801-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7802-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7801-2 Vendor Advisory
- https://ubuntu.com/security/notices/USN-7809-1 Vendor Advisory
- https://git.kernel.org/stable/c/5d30d256661fc11b6e73fac6c3783a702e1006a3 URL
- https://git.kernel.org/stable/c/78f3d64b30210c0e521c59357431aca14024cb79 URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/21xxx/CVE-2025-21981... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-21981 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://ubuntu.com/security/notices/USN-7801-3 Vendor Advisory
- https://git.kernel.org/stable/c/fcbacc47d16306c87ad1b820b7a575f6e9eae58b URL
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Type
CWE-401Memory Leak
Timeline
Published1 Apr 2025
Updated3 Nov 2026
First seen7 Mar 2026
Track software like this
Free during beta