CVE-2026-22985

CVE-2026-22985 is a NULL pointer dereference vulnerability in the Linux kernel's idpf driver. It occurs when specific ethtool operations, such as disabling rxhash, are performed on an idpf network interface before it has been brought up, leading to a kernel crash. This vulnerability is rated Medium severity (CVSS 5.5) with a local attack vector and low attack complexity. A local attacker with appropriate privileges could trigger a denial-of-service by crashing the kernel. There is no evidence of active exploitation, and public exploit code (Metasploit, Nuclei, ExploitDB) is not available. Community discussion and media coverage are minimal, suggesting limited public awareness or interest.