CVE-2025-39814 | Linux Kernel up to 6.16.4/6.17-rc3 ice reset ice_unplug_aux_dev null pointer dereference

September 16, 2025 Yanac

A vulnerability was found in Linux Kernel up to 6.16.4/6.17-rc3 and classified as critical. This vulnerability affects the function ice_unplug_aux_dev of the file /sys/class/net//device/reset of the component ice. The manipulation results in null pointer dereference.

This vulnerability is identified as CVE-2025-39814. The attack can only be performed from the local network. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More