CVE-2026-63999

Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026

Description

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> ethtool: rss: fix indir_table and hkey leak on get_rxfh failure<br /> <br /> rss_prepare_get() allocates the indirection table and hash key buffer<br /> via rss_get_data_alloc(), then calls ops-&gt;get_rxfh() to populate them.<br /> If get_rxfh() fails, the function returns an error without freeing<br /> the allocation.

Impact