In the Linux kernel, the following vulnerability has been resolved: ice: fix use-after-free in dynamic port cleanup ice_dealloc_dynamic_port() uses… (CVE-2026-99044)

The Linux kernel's ice driver contained a use-after-free vulnerability in the function ice_dealloc_dynamic_port(). Specifically, the function uses dyn_port->vsi->idx to remove a dynamic port from pf->dyn_ports but frees the VSI object before reading the index, causing a use-after-free condition. The remediation reverses the order of operations by erasing the xarray entry prior to freeing the VSI, preventing access to freed memory.

This vulnerability could lead to undefined behavior such as kernel crashes or potential escalation of privileges due to use-after-free memory access. However, no known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this use-after-free vulnerability by correcting the order of resource cleanup in ice_dealloc_dynamic_port(). Users should update to the patched kernel version once available. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.