-

CVE-2026-63999

ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

In the Linux kernel, the following vulnerability has been resolved:

ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

rss_prepare_get() allocates the indirection table and hash key buffer
via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them.
If get_rxfh() fails, the function returns an error without freeing
the allocation.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version 4f038a6a02d20859a3479293cbf172b0f14cbdd6
Version < 33d05c22d6f227c5ae171c46df2f6f8bf48047ea
Status affected
Version 4f038a6a02d20859a3479293cbf172b0f14cbdd6
Version < 80d95d92f828cfcace955d673637d944178b435f
Status affected
Version 4f038a6a02d20859a3479293cbf172b0f14cbdd6
Version < 266297692f97008ca48bc311775c087c59bd7fe3
Status affected
Version 81a5174e64ce4fb7b7a2f6499b835c904c9451ee
Status affected
Version ec9faff49a4ea27731de39cb887b7e590e93157b
Status affected
Version c5ed0eaddcbda56079091fc3876b140a6e70a548
Status affected
Version a065b996052656a65afc51ad82336dc55ae4c72f
Status affected
Version adee9db710a6117b978a25ed4153846b7c56ec9a
Status affected
Version 5eb3fdc4b6281b29e830300c866a36d90442b1f0
Status affected
Version 5.15.181
Version < 5.16
Status affected
Version 6.1.135
Version < 6.2
Status affected
Version 6.6.88
Version < 6.7
Status affected
Version 6.12.24
Version < 6.13
Status affected
Version 6.13.12
Version < 6.14
Status affected
Version 6.14.3
Version < 6.15
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.15
Status affected
Version 0
Version < 6.15
Status unaffected
Version <= 6.18.*
Version 6.18.35
Status unaffected
Version <= 7.0.*
Version 7.0.12
Status unaffected
Version <= *
Version 7.1
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.062
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea
https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f
https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3