CVE-2026-63987
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
19/07/2026
Última modificación:
20/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES<br />
<br />
ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION<br />
nest list with an index &#39;i&#39; and writes new_profile[i++] without<br />
bounding i. The destination is kmemdup()&#39;d at NET_DIM_PARAMS_NUM_PROFILES<br />
entries (5), but the Netlink nest count is entirely user-controlled.<br />
Netlink policies do not have support for constraining the number<br />
of nested entries (or number of multi-attr entries).
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA