Riskcovery

CVE-2026-63987

ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

State
Published
Severity
7.8 High
Published
Jul 19, 2026
Updated
Oct 19, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index 'i' and writes new_profile[i++] without bounding i. The destination is kmemdup()'d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

Affected Products

ProductVersions
LinuxLinux
  • f750dfe825b904164688adeb147950e0e0c4d262 to before d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bcAffected
  • f750dfe825b904164688adeb147950e0e0c4d262 to before 0c02c190bcd9822477038ff2cee10ea584ac1b1dAffected
  • f750dfe825b904164688adeb147950e0e0c4d262 to before 6205f7166d2dd14a017a5802c81e5bd1421a8635Affected
  • f750dfe825b904164688adeb147950e0e0c4d262 to before 7281b096b072f6c6e30420e3467d738f2e4c4b57Affected
LinuxLinux
  • 6.11Affected
  • before 6.11Not affected
  • 6.12.93 through 6.12.*Not affected
  • 6.18.35 through 6.18.*Not affected
  • 7.0.12 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.