Intel ice driver (Ethernet 800 Series, Linux kernel mode): A protection-mechanism failure in the E810 Linux kernel

Impact

A protection-mechanism failure in the E810 Linux kernel driver reachable by an unauthenticated attacker. Driver-side counterpart to the E810 firmware protection failures in the same advisory.

Who can reach it

Unauthenticated attacker able to present traffic to the interface.

What to do

Fixed in the Intel out-of-tree ice driver (or the equivalent in-kernel version). Updating the driver requires unloading and reloading the module, which drops every link on that NIC - on a node whose RDMA fabric carries collective traffic, that is a job-killing event, so drain first. If you take it via a distro kernel update instead, it is a reboot. No firmware flash for the driver-side fixes. Target ice 28.3 or later.

References