CVE-2026-63999
Severity CVSS v4.0:
Pending analysis
Type:
Unavailable / Other
Publication date:
19/07/2026
Last modified:
30/07/2026
Description
In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure<br />
<br />
rss_prepare_get() allocates the indirection table and hash key buffer<br />
via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them.<br />
If get_rxfh() fails, the function returns an error without freeing<br />
the allocation.



