CVE-2025-68215

What it actually does

Missing calls to ice_ptp_cleanup_pf and ps_lock mutex deinitialization plus ptp clock unregistration in error paths during probe, PTP init, or reset handling cause the ice_adapter object to be freed with a non-empty port list, triggering a kernel WARNING in ice_adapter_put.

Why it matters to the business

Systems using Intel ice network adapters may experience driver unload warnings or instability during error recovery, PTP restarts, or module removal, increasing operational risk in high-availability or cloud environments until patched kernels are deployed.

How an attack unfolds

An attacker with local access triggers an error path in PTP initialization or reset handling within the ice driver, after which normal driver removal or module unload leaves PTP resources uncleaned, resulting in the observed warning and potential resource accounting issues.

How to fix it

Upgrade to fixed kernel version 6.12.60 or apply commit f5eb91f876ebecbcd90f9edcaea98dcb354603b3. For affected Chainguard packages update to 1.29.8-r1 or newer. Keep PTP state marked uninitialized on init to prevent duplicate release.

How to confirm the fix worked

Confirm kernel version or package release matches a fixed version, then reproduce probe or reset error paths followed by driver removal and verify absence of the ice_adapter_put WARNING in dmesg.

Typical attack path

1. Gain local access or trigger PTP feature initialization/reset error
2. Force driver probe failure or PTP restart error path
3. Unload or detach the ice driver module
4. ice_adapter_put detects non-empty port list and emits WARNING

How to detect it

Search kernel logs for the exact WARNING signature containing ice_adapter_put+0xef and the call trace ending in ice_module_exit; correlate with ice driver load/unload events around PTP initialization or NVM updates.

What your security team should do

• Prioritize patching systems with ice NICs that use PTP within the next maintenance window
• Monitor dmesg for ice_adapter_put warnings on driver unload
• Test driver removal and PTP restart error scenarios in staging before production rollout