Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-68440

net: txgbe: fix heap overflow when reading module EEPROM

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore causes an out-of-bounds write. Copy only the remaining bytes on the final dword instead.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 9b97b6b5635b3de18debd07a3adcf25198ec8299 to < febcced6958158e7e90a55a8567b3f5c3639c0b9affected
  • 9b97b6b5635b3de18debd07a3adcf25198ec8299 to < 6a905a71fd43ce8b45f05044b11491337f232c9daffected

Linux Linux

Default version status: affected

  • 6.19affected
  • 0 to < 6.19unaffected
  • 7.1.6 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References