CVE-2026-68128

Name of the Vulnerable Software and Affected Versions Linux kernel version 7.1.0-rc1

Description An issue exists in the ice parser profile init() function where the system fails to validate the ptype value provided through VIRTCHNL. Because the set bit() operation uses a bitmap with a maximum size of 1024 bits, a malicious Virtual Function (VF) can provide a ptype value of 1024 or greater. This leads to an out-of-bounds write past the end of the bitmap, resulting in a kernel page fault and a system crash.

Recommendations Update Linux kernel version 7.1.0-rc1 to a version where the ice parser profile init() function is patched to reject out-of-range ptype values with an -EINVAL error.