SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63997

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel's ethtool module could lead to a reference leak of the network device (netdev) during firmware flashing errors, potentially causing resource management issues. This flaw may affect the stability and reliability of network operations, particularly in environments where firmware updates are frequent. System administrators and developers managing Linux-based systems should prioritize addressing this issue to prevent potential disruptions in network functionality.

CVE
CVE-2026-63997
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is missing undo for setting the "in_progress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we are holding rtnl_lock.