eth: ice: don't dereference pointers from TP_printk() (CVE-2026-97978) | HOL Guard CVE

Unknown severity · Source severity not reportedCVE-2026-97978

eth: ice: don't dereference pointers from TP_printk()

Answer in brief

CVE-2026-97978 records a Unknown severity vulnerability in eth: ice: don't dereference pointers from TP_printk(). The current sources do not mark it as known exploited. The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Analysis pending evidence review

HOL Guard separates source facts from reviewed analysis. See the methodology.

Published Sep 25, 2026Updated Sep 25, 2026Source checked Sep 25, 2026First seen by HOL Sep 25, 2026Material review Sep 25, 2026

Upstream Advisory

Key facts

Risk: Unknown severitySource severity not reported
Exploitation: Not marked as known exploited
Affected software: 2 mapped packages or products
Fix availability: Available

Why this deserves its current priority

A CVSS score is not reported in the current record. The current sources do not mark it as known exploited. Treat this as a source-backed prioritization signal, not a statement about your environment.

Analysis status

Analysis pending evidence review

Factual feed record only; HOL analysis is not approved for indexing. Read the methodology.

Affected scope and exposure questions

The current feed maps Linux/Linux (generic), Linux/Linux (generic). Check affected ranges and fixed versions before updating.

Mapped affected packages and fixed versions
Package	Affected range	Fixed version
Linux/Linuxgeneric	>=3089cf6d3caa1eb344aac05c875f4aeaf891552d <ae230874e3ba27e975a9bb21a6ffd05d6a2ea318 \|\| >=3089cf6d3caa1eb344aac05c875f4aeaf891552d <0b0d2f9db2406aa541a8bc3737f4f4aae1cafde9 \|\| >=3089cf6d3caa1eb344aac05c875f4aeaf891552d <c42db35518bb0eae42ec955520eee0aa94a4a6fe \|\| >=3089cf6d3caa1eb344aac05c875f4aeaf891552d <b8bf9bfda5f62e11444e483c2b4aaff90c5cfc6b	ae230874e3ba27e975a9bb21a6ffd05d6a2ea318, 0b0d2f9db2406aa541a8bc3737f4f4aae1cafde9, c42db35518bb0eae42ec955520eee0aa94a4a6fe, b8bf9bfda5f62e11444e483c2b4aaff90c5cfc6b
Linux/Linuxgeneric	5.14	Not reported

Recommended response

Check inventory. Check lockfiles and deployed manifests for Linux/Linux, Linux/Linux.
Review the reported fix. Update Linux/Linux to ae230874e3ba27e975a9bb21a6ffd05d6a2ea318 if you use the affected versions. Test the change in a non-production environment first.

Evidence timeline and material changes

Published upstream
Sep 25, 2026
Evidence: source:cvelist:source_dates:source-dates:record
Source modified
Sep 25, 2026
Evidence: source:cvelist:source_dates:source-dates:record
First seen by HOL
Sep 25, 2026

Sources and claim methodology

Upstream source description

In the Linux kernel, the following vulnerability has been resolved: eth: ice: don't dereference pointers from TP_printk() After forwarding net-next during the v7.3 merge window we started seeing: TRACE EVENT ERROR: Event ice_tx_dim_work has double dereference in TP_printk: REC->q_vector->tx.tx_ring->q_index WARNING: kernel/trace/trace_events.c:420 at test_double_dereference.cold+0x39/0x4b this is due to extra checks added in tracing subsystem in commit b5cc230af5e5 ("tracing: Warn when an event dereferences a pointer in TP_printk()"). Printing happens long after the event was recorded, by which point the pointers may be invalid (the ring or the dim instance). Copy the eight scalars into the event instead.

Quoted source text, attributed separately from HOL analysis.