CVE-2026-23166

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

ice: Fix NULL pointer dereference in ice_vsi_set_napi_queues

Add NULL pointer checks in ice_vsi_set_napi_queues() to prevent crashes

during resume from suspend when rings[q_idx]->q_vector is NULL.

Tested adaptor:

60:00.0 Ethernet controller [0200]: Intel Corporation Ethernet Controller E810-XXV for SFP [8086:159b] (rev 02)

Subsystem: Intel Corporation Ethernet Network Adapter E810-XXV-2 [8086:4003]

SR-IOV state: both disabled and enabled can reproduce this issue.

kernel version: v6.18

Reproduce steps:

Boot up and execute suspend like systemctl suspend or rtcwake.

Log:

<1>[ 231.443607] BUG: kernel NULL pointer dereference, address: 0000000000000040

<1>[ 231.444052] #PF: supervisor read access in kernel mode

<1>[ 231.444484] #PF: error_code(0x0000) - not-present page

<6>[ 231.444913] PGD 0 P4D 0

<4>[ 231.445342] Oops: Oops: 0000 [#1] SMP NOPTI

<4>[ 231.446635] RIP: 0010:netif_queue_set_napi+0xa/0x170

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References