SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63999

UNKNOWN · CVSS N/A EPSS 0.17%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

The vulnerability in the Linux kernel affects the ethtool component, specifically during the retrieval of the indirection table and hash key buffer, where memory allocated for these structures is not properly freed if the operation fails. This can lead to memory leaks, potentially impacting system performance and stability. Organizations utilizing Linux systems, particularly those relying on ethtool for network interface management, should prioritize addressing this issue to mitigate any adverse effects on resource utilization.

CVE
CVE-2026-63999
Severity
UNKNOWN
CVSS
N/A
EPSS
0.17%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.