---
id: CVE-2026-23117
title: 'ice: add missing ice_deinit_hw() in devlink reinit path'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  ice: add missing ice_deinit_hw() in devlink reinit path

  devlink-reload results in ice_init_hw failed error, and then removing
  the ice driver causes a NULL pointer dere…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= c91eee346089e4d287d5a111719e57cac605275e <
    a3d99e2fbf01446d31a0d0dfc46444e915a1f6d4
  - >-
    Linux >= 1390b8b3d2bef9bfbb852fc735430798bfca36e7 <
    42fb5f3deb582cb96440e4683745017dbabb83d6
  - Linux >= 6.18.2 < 6.18.8
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2026-11-05T21:19:45.390625Z'
published: '2026-02-14'
updated: '2026-11-05'
sourceUpdated: '2026-11-05T21:23:17.769Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-23117'
references:
  - url: 'https://git.kernel.org/stable/c/a3d99e2fbf01446d31a0d0dfc46444e915a1f6d4'
  - url: 'https://git.kernel.org/stable/c/42fb5f3deb582cb96440e4683745017dbabb83d6'
tags:
  - cve.org
epss: 0.00116
epssPercentile: 0.01631
ingestedAt: '2026-11-05T22:38:32.072Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

ice: add missing ice_deinit_hw() in devlink reinit path

devlink-reload results in ice_init_hw failed error, and then removing
the ice driver causes a NULL pointer dereference.

[  +0.102213] ice 0000:ca:00.0: ice_init_hw failed: -16
...
[  +0.000001] Call Trace:
[  +0.000003]  <TASK>
[  +0.000006]  ice_unload+0x8f/0x100 [ice]
[  +0.000081]  ice_remove+0xba/0x300 [ice]

Commit 1390b8b3d2be ("ice: remove duplicate call to ice_deinit_hw() on
error paths") removed ice_deinit_hw() from ice_deinit_dev(). As a result
ice_devlink_reinit_down() no longer calls ice_deinit_hw(), but
ice_devlink_reinit_up() still calls ice_init_hw(). Since the control
queues are not uninitialized, ice_init_hw() fails with -EBUSY.

Add ice_deinit_hw() to ice_devlink_reinit_down() to correspond with
ice_init_hw() in ice_devlink_reinit_up().

## Affected

- `Linux >= c91eee346089e4d287d5a111719e57cac605275e < a3d99e2fbf01446d31a0d0dfc46444e915a1f6d4`
- `Linux >= 1390b8b3d2bef9bfbb852fc735430798bfca36e7 < 42fb5f3deb582cb96440e4683745017dbabb83d6`
- `Linux >= 6.18.2 < 6.18.8`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.