CVE-2026-53007

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A potential NULL pointer dereference exists in the error path of the ice set ringparam() function. The issue occurs because ice set ringparam() nullifies the tstamp ring of temporary tx rings without clearing the ICE TX RING FLAGS TXTIME bit. If this bit remains set and a subsequent call to ice setup tx ring() fails, the unwinding sequence triggers ice clean tx ring(), which calls ice is txtime cfg(). Since the bit is still set, it proceeds to ice free tx tstamp ring() and then ice free tstamp ring(), leading to a NULL pointer dereference when accessing tstamp ring->desc.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.