Memory Leak Issue in Linux Kernel Related to ethtool and RSS

CVE-2026-63999

What is CVE-2026-63999?

A memory leak vulnerability exists in the Linux Kernel's ethtool component. Specifically, during the execution of the rss_prepare_get() function, memory allocation for the indirection table and hash key buffer occurs via rss_get_data_alloc(). If an error arises during the get_rxfh() call, the function fails to free the allocated memory, leading to a memory leak. This vulnerability can potentially degrade system performance and stability over time. It is essential for users to update to the latest kernel version to mitigate this issue.

References