Intel ice driver (Ethernet 800 Series, Linux kernel mode): A missing check for an exceptional condition in the

Impact

A missing check for an exceptional condition in the 800-series Linux driver, scored high, reachable by an authenticated user. Same rollout unit as the rest of the ice 1.17.2 batch.

Who can reach it

Authenticated local user on the node.

What to do

Fixed in the Intel out-of-tree ice driver (or the equivalent in-kernel version). Updating the driver requires unloading and reloading the module, which drops every link on that NIC - on a node whose RDMA fabric carries collective traffic, that is a job-killing event, so drain first. If you take it via a distro kernel update instead, it is a reboot. No firmware flash for the driver-side fixes. Target ice 1.17.2 or later.

References