Medium severity5.5NVD Advisory· Published Jul 19, 2026· Updated Oct 8, 2026
CVE-2026-63999
CVE-2026-63999
Description
In the Linux kernel, the following vulnerability has been resolved:
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
28- osv-coords14 versionspkg:rpm/opensuse/kernel-default&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-build&distro=openSUSE%20Leap%2016.0pkg:linux/kernelpkg:rpm/opensuse/dtb-aarch64&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-64kb&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-docs&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-obs-qa&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-rt&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-source&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-default-base&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-zfcpdump&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-kvmsmall&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-syms&distro=openSUSE%20Leap%2016.0pkg:rpm/opensuse/kernel-azure&distro=openSUSE%20Leap%2016.0
< 6.12.0-160000.38.1+ 13 more
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: >= 6.15.0, < 6.18.35
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1.160000.2.22
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
- (no CPE)range: < 6.12.0-160000.38.1
cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*+ 13 more
- cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*range: >=5.15.181,<5.16
- cpe:2.3:o:linux:linux_kernel:6.15:-:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc5:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc6:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:6.15:rc7:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc4:*:*:*:*:*:*
- cpe:2.3:o:linux:linux_kernel:7.1:rc5:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.