CVE-2026-68133

A flaw was found in the Linux kernel's ice driver. A local attacker, by triggering a Physical Function (PF) reset while the Precision Time Protocol (PTP) state is uninitialized, could cause an invalid state transition. This could lead to a kernel bug and a system crash, resulting in a Denial of Service (DoS).

This vulnerability is rated as Low severity for Red Hat Enterprise Linux because exploitation requires specific Intel Ethernet 800 Series hardware, local administrative or hypervisor privileges to configure PCI passthrough, and occurs only under uncommon device teardown conditions. Standard deployments without physical function passthrough to virtual machines are not exposed to this state transition failure. Furthermore, the resulting kernel panic manifests during driver unload rather than standard network operations, restricting the blast radius to an intentional reinitialization or removal sequence.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.