CVE-2026-99044

NONE
—CVSS v3
—CVSS v2
— EPSS (exploit probability)
—CWE

Description

In the Linux kernel, the following vulnerability has been resolved:

ice: fix use-after-free in dynamic port cleanup

ice_dealloc_dynamic_port() uses dyn_port->vsi->idx to erase the dynamic
port from pf->dyn_ports. However, it frees the VSI before reading the
index for the erase, resulting in a use-after-free.

Follow the reverse of the allocation order in ice_alloc_dynamic_port()
by erasing the xarray entry before freeing the VSI.

Affected routers (0)

No routers currently mapped to this CVE in our database.

External references