The Linux kernel contains a use‑after‑free (CWE‑825) in the ice driver’s dynamic port cleanup routine. During deallocation, ice_dealloc_dynamic_port() frees the VSI before reading its index used for erasing the port, leaving a dangling pointer that can be referenced later. An attacker who can trigger successive allocation and deallocation cycles might read or overwrite kernel memory, potentially achieving local privilege escalation or causing a system crash.

All Linux kernel releases that include the ice driver with the faulty deallocation logic are affected. No specific version range is listed in the advisory.

The vulnerability is a kernel use‑after‑free (CWE‑825) with a CVSS score of 4.4, indicating low to moderate severity. The EPSS score is < 1% and it is not listed in the CISA KEV catalog, suggesting it has not yet been publicly exploited. Exploitation would likely require local access to the kernel—such as a privileged user or compromised process—and a precise sequence of port allocation and deallocation to trigger the dangling pointer.