In the Linux kernel, the following vulnerability has been resolved: ice: fix FDIR CTRL VSI resource leak in iceresetallvfs() Resetting all VFs causes resource leak on VFs with FDIR filters enabled as CTRL VSIs are only invalidated and not freed. Fix by using icevfctrlvsirelease() instead of icevfctrlinvalidatevsi() which aligns behavior with the iceresetvf() function. Reproduction: echo 1 > /sys/class/net/$pf/device/sriovnumvfs ethtool -N $vf flow-type ether proto 0x9000 action 0 echo 1 > /sys/class/net/$pf/device/reset