U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2026-63999

Change History

New CVE Received from kernel.org 7/19/2026 12:17:39 PM

Action Type Old Value New Value
Added Description

                  
                
              
In the Linux kernel, the following vulnerability has been resolved:

ethtool: rss: fix indir_table and hkey leak on get_rxfh failure

rss_prepare_get() allocates the indirection table and hash key buffer
via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them.
If get_rxfh() fails, the function returns an error without freeing
the allocation.
Added Reference

                  
                
              
https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3
Added Reference

                  
                
              
https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea
Added Reference

                  
                
              
https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f
Added Affected

                  
                
              
[{"vendor":"Linux","product":"Linux","defaultStatus":"unaffected","programFiles":["net/ethtool/rss.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"4f038a6a02d20859a3479293cbf172b0f14cbdd6","lessThan":"33d05c22d6f227c5ae171c46df2f6f8bf48047ea","versionType":"git","status":"affected"},{"version":"4f038a6a02d20859a3479293cbf172b0f14cbdd6","lessThan":"80d95d92f828cfcace955d673637d944178b435f","versionType":"git","status":"affected"},{"version":"4f038a6a02d20859a3479293cbf172b0f14cbdd6","lessThan":"266297692f97008ca48bc311775c087c59bd7fe3","versionType":"git","status":"affected"},{"version":"81a5174e64ce4fb7b7a2f6499b835c904c9451ee","versionType":"git","status":"affected"},{"version":"ec9faff49a4ea27731de39cb887b7e590e93157b","versionType":"git","status":"affected"},{"version":"c5ed0eaddcbda56079091fc3876b140a6e70a548","versionType":"git","status":"affected"},{"version":"a065b996052656a65afc51ad82336dc55ae4c72f","versionType":"git","status":"affected"},{"version":"adee9db710a6117b978a25ed4153846b7c56ec9a","versionType":"git","status":"affected"},{"version":"5eb3fdc4b6281b29e830300c866a36d90442b1f0","versionType":"git","status":"affected"},{"version":"5.15.181","lessThan":"5.16","versionType":"semver","status":"affected"},{"version":"6.1.135","lessThan":"6.2","versionType":"semver","status":"affected"},{"version":"6.6.88","lessThan":"6.7","versionType":"semver","status":"affected"},{"version":"6.12.24","lessThan":"6.13","versionType":"semver","status":"affected"},{"version":"6.13.12","lessThan":"6.14","versionType":"semver","status":"affected"},{"version":"6.14.3","lessThan":"6.15","versionType":"semver","status":"affected"}]},{"vendor":"Linux","product":"Linux","defaultStatus":"affected","programFiles":["net/ethtool/rss.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","versions":[{"version":"6.15","status":"affected"},{"version":"0","lessThan":"6.15","versionType":"semver","status":"unaffected"},{"version":"6.18.35","lessThanOrEqual":"6.18.*","versionType":"semver","status":"unaffected"},{"version":"7.0.12","lessThanOrEqual":"7.0.*","versionType":"semver","status":"unaffected"},{"version":"7.1","lessThanOrEqual":"*","versionType":"original_commit_for_fix","status":"unaffected"}]}]