A flaw in the Linux kernel’s ice driver causes a resource leak when all virtual functions (VFs) are reset while Flow Director (FDIR) filters are enabled. The reset path invalidates the Control VSI but does not free the associated VSI objects, leading to a gradual accumulation of unreleased memory. Over time this can exhaust kernel resources, causing system instability or reboot. The primary impact is a denial‑of‑service condition arising from memory exhaustion.

The issue affects Linux distributions that include the ice network driver and enable SR‑IOV virtual functions with FDIR filters. Any kernel version that contains the unpatched ice driver is at risk. Systems running the affected kernel implement the problematic reset logic for all VFs and thus are potentially compromised if collaborative VF management or bulk resets occur.

Based on the description, it is inferred that the exploit requires local privileged access; an attacker must be able to reset VFs or manipulate the device’s sysfs interface. The EPSS score is below 1% and the flaw is not listed in the CISA KEV catalog, indicating limited real‑world exploitation reports. The CVSS score of 7.1 reflects a high severity risk. Though exploitation is simple for a privileged user, the reward is system instability over time rather than immediate compromise, making it a significant concern for environments with frequent VF churn or where uptime is critical.