CVE-2025-22118
kernel: ice: validate queue quanta parameters to prevent OOB access
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · April 16, 2025
Updated · October 30, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
ice: validate queue quanta parameters to prevent OOB access
Add queue wraparound prevention in quanta configuration. Ensure end_qid does not overflow by validating start_qid and num_queues.
Statement
This vulnerability does not affect Red Hat Enterprise Linux or other supported products because the flawed code was never introduced into Red Hat enterprise kernels. Upstream, the flaw involves missing queue boundary verification within the Intel network driver's virtual channel communication, which could allow out-of-bounds memory operations when processing queue configuration requests. Exploitation would require environments utilizing affected Intel hardware with virtualized networking functions enabled. Because the commits that introduced the flaw are absent from Red Hat distributions, no security risk is posed to Red Hat deployments.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE not specified