Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.
References
- https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3
- https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea
- https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f
FAQ
What is CVE-2026-63999?
CVE-2026-63999 is a documented vulnerability. In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure rss_prepare_get() allocates the indirection table and hash key buf...
How severe is CVE-2026-63999?
CVSS scoring is not yet available for CVE-2026-63999. Check NVD for updates.
Is there a patch for CVE-2026-63999?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.