Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63997

ethtool: module: avoid leaking a netdev ref on module flash errors

Description

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is missing undo for setting the "in_progress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we are holding rtnl_lock.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e to < f7b4513e77f9571dc1041a798b93b5c4a4bfc191affected
  • 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e to < 61848c83b9132ab839809fe415ba7802a0aca4f6affected
  • 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e to < 956b134d917fd7e014dc7e39a9b7610c04fcc9baaffected
  • 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e to < fb7f511d62692661846c47f199e0afe25c2982dbaffected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.93 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References