CVE-2026-53289

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference exists in the ice reset all vfs() function. The issue occurs because ice reset all vfs() ignores the return value of ice vf rebuild vsi(). If the VSI rebuild fails—which can happen during NVM firmware updates via nvmupdate64e when the firmware is in a transitional state—the ice vsi rebuild() function tears down the VSI, leaving txq map and rxq map as NULL. A subsequent unconditional call to ice vf post vsi rebuild() then triggers a kernel crash in ice ena vf q mappings() when it attempts to access vsi->txq map[0].

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.