Vulnerability in Linux Kernel Affecting Ethtool Functionality

CVE-2026-63987

What is CVE-2026-63987?

A vulnerability exists in the Linux Kernel within the Ethtool component, where the profile updates are not correctly bounded. Specifically, the function ethnl_update_profile() processes the nested list for IRQ moderation without adequate safeguards for the index used, allowing an attacker to manipulate the number of nested entries. This oversight could lead to potential memory corruption due to the mishandling of user-controlled input, necessitating careful attention to user input validation within the kernel.

References