The vulnerability in the Linux kernel's ice driver arises because ice_reset_all_vfs() does not check the return value of ice_vf_rebuild_vsi(). When VSI rebuild fails, for example during NVM firmware updates, the VSI teardown leaves txq_map and rxq_map pointers as NULL. Subsequent calls to ice_vf_post_vsi_rebuild() access these NULL pointers, causing a kernel crash due to NULL pointer dereference. The single-VF reset path correctly handles this by checking return values and skipping further calls on failure. The patch applies this pattern to ice_reset_all_vfs(), preventing the crash by skipping calls when rebuild fails and leaving the VF safely disabled. The underlying cause of rebuild failure during firmware updates remains, but this fix prevents kernel crashes from NULL pointer dereferences.

This vulnerability causes a kernel crash (denial of service) when the ice driver attempts to access NULL pointers after a failed VSI rebuild. It does not lead to information disclosure or privilege escalation but results in system instability during specific operations such as NVM firmware updates.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. The described patch pattern involves checking return values of ice_vf_rebuild_vsi() and skipping subsequent calls on failure to prevent kernel crashes. Until an official fix is confirmed, avoid performing NVM firmware updates or other operations that trigger VSI rebuilds on affected systems, or apply any available vendor updates addressing this issue.