{"id":"CVE-2026-68133","title":"ice: fix PTP Call Trace during PTP release","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nice: fix PTP Call Trace during PTP release\n\nIf a PF reset occurs when the PTP state is ICE_PTP_UNINIT, then\nice_ptp_rebuild() will update the state to ICE_PTP_ERROR. Th…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < 7d517b255f669cedd09830214d55f2f413b34481","Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < e4406cbdd915f702d2ed9ee8b30683a16b06c6ac","Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < 14fceda28069fdbe1bb49cdb6e1774892b583348","Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < f6a7e00b81e35ef1325234925f2fe1e53b466f92","Linux 6.9"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-11-06T16:42:57.558451Z"},"published":"2026-08-10","updated":"2026-11-06","sourceUpdated":"2026-11-06T16:44:59.332Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-68133","references":[{"url":"https://git.kernel.org/stable/c/7d517b255f669cedd09830214d55f2f413b34481"},{"url":"https://git.kernel.org/stable/c/e4406cbdd915f702d2ed9ee8b30683a16b06c6ac"},{"url":"https://git.kernel.org/stable/c/14fceda28069fdbe1bb49cdb6e1774892b583348"},{"url":"https://git.kernel.org/stable/c/f6a7e00b81e35ef1325234925f2fe1e53b466f92"}],"tags":["cve.org"],"epss":0.00175,"epssPercentile":0.07069,"ingestedAt":"2026-11-06T16:57:43.144Z","slug":"CVE-2026-68133","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nice: fix PTP Call Trace during PTP release\n\nIf a PF reset occurs when the PTP state is ICE_PTP_UNINIT, then\nice_ptp_rebuild() will update the state to ICE_PTP_ERROR. This will\nresult in the following PTP release call trace during driver unload:\n\n    kernel BUG at lib/list_debug.c:52!\n    ice_ptp_release+0x332/0x3c0 [ice]\n    ice_deinit_features.part.0+0x10e/0x120 [ice]\n    ice_remove+0x100/0x220 [ice]\n\nThis was observed when passing PF1 through to a VM. ice_ptp_init()\nfails because ctrl_pf is NULL and sets the state to ICE_PTP_UNINIT.\n\nFix by detecting the ICE_PTP_UNINIT state in ice_ptp_rebuild() and\nreturning without error, preventing the invalid state transition to\nICE_PTP_ERROR. The only valid path to ICE_PTP_ERROR is from\nICE_PTP_RESETTING after a failed rebuild.\n\n## Affected\n\n- `Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < 7d517b255f669cedd09830214d55f2f413b34481`\n- `Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < e4406cbdd915f702d2ed9ee8b30683a16b06c6ac`\n- `Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < 14fceda28069fdbe1bb49cdb6e1774892b583348`\n- `Linux >= 8293e4cb2ff54b1ec4f7206dcb74c908f62a3fb8 < f6a7e00b81e35ef1325234925f2fe1e53b466f92`\n- `Linux 6.9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}