CVE-2026-68128

A flaw was found in the Linux kernel's ice driver. A malicious virtual function (VF) can provide an out-of-range 'ptype' value through the VIRTCHNL interface. This can lead to a write past the end of an allocated memory region, causing a kernel page fault and resulting in a Denial of Service (DoS).

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

If Intel Ethernet 800 Series Network Adapters are not in use, the ice kernel module can be blacklisted to prevent it from loading. Create a file /etc/modprobe.d/blacklist-ice.conf with the content blacklist ice. After saving the file, regenerate the initramfs using dracut -f -v and reboot the system for the changes to take effect. This action may disrupt network connectivity if the ice driver is required for active network interfaces.