Linux Kernel Vulnerability in ethtool Module Affecting Flash Operations

CVE-2026-63998

What is CVE-2026-63998?

A vulnerability exists in the Linux kernel's ethtool module, where errors encountered during the flash operation are not properly managed. Specifically, during the validate() process, if a failure occurs, the system fails to correctly execute ethnl_ops_complete() even after initiating ethnl_ops_begin(). This oversight can lead to inconsistent states within the module, potentially affecting network configurations and device performance.

References