Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-63999

ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • c5ed0eaddcbda56079091fc3876b140a6e70a548 to < 14dbf22c397b799b3a80f63fc90c2fc0585bbeb3affected
  • a065b996052656a65afc51ad82336dc55ae4c72f to < 323faef6366349f57d4ad67d318a0c8906e360b3affected
  • 4f038a6a02d20859a3479293cbf172b0f14cbdd6 to < 33d05c22d6f227c5ae171c46df2f6f8bf48047eaaffected
  • 4f038a6a02d20859a3479293cbf172b0f14cbdd6 to < 80d95d92f828cfcace955d673637d944178b435faffected
  • 4f038a6a02d20859a3479293cbf172b0f14cbdd6 to < 266297692f97008ca48bc311775c087c59bd7fe3affected
  • 81a5174e64ce4fb7b7a2f6499b835c904c9451eeaffected
  • ec9faff49a4ea27731de39cb887b7e590e93157baffected
  • adee9db710a6117b978a25ed4153846b7c56ec9aaffected
  • 5eb3fdc4b6281b29e830300c866a36d90442b1f0affected
  • 6.6.88 to < 6.6.160affected
  • 6.12.24 to < 6.12.114affected
  • 5.15.181 to < 5.16affected
  • 6.1.135 to < 6.2affected
  • 6.13.12 to < 6.14affected
  • 6.14.3 to < 6.15affected

Linux Linux

Default version status: affected

  • 6.15affected
  • 0 to < 6.15unaffected
  • 6.6.160 to ≤ 6.6.*unaffected
  • 6.12.114 to ≤ 6.12.*unaffected
  • 6.18.35 to ≤ 6.18.*unaffected
  • 7.0.12 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References