CVE-2025-21883: 
Linux Kernel vulnerability analysis and mitigation

A vulnerability in the Linux kernel's ice driver was discovered and disclosed on March 27, 2025. The issue occurs when ice_ena_vfs() fails after calling ice_create_vf_entries(), where it frees all VFs without removing them from the snapshot PF-VF mailbox list, leading to list corruption (NVD).

The vulnerability manifests as a list corruption bug in the ice driver's VF management code. When ice_ena_vfs() fails after ice_create_vf_entries(), it incorrectly handles the cleanup process, resulting in a corrupted list state. The issue can be reproduced by manipulating the eswitch mode and SRIOV settings. The bug manifests either as a list_add corruption where next->prev should be prev but was found to be NULL, or as a KASAN use-after-free report in __list_add_valid_or_report (NVD, Snyk).

The vulnerability results in list corruption which can lead to system instability and potential denial of service. According to Red Hat's assessment, the vulnerability has a CVSS v3.1 base score of 5.5, indicating a medium severity impact with high availability impact but no loss of confidentiality or integrity (Red Hat).

The vulnerability requires local access to exploit, with low attack complexity and low privileges required. No user interaction is needed to trigger the vulnerability. The scope is unchanged, meaning the vulnerable component and the impacted component are managed by the same security authority (Snyk).

The vulnerability has been resolved in the Linux kernel through a fix that moves the VF removal operation to ice_free_vf_entries(), which is called in various places where VFs are being removed, including ice_free_vfs() itself (NVD).