PT-2026-61315 · Linux · Linux Kernel

CVE-2026-63998 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ethtool module where the ethnl ops complete() function is not called when validate() fails, despite ethnl ops begin() having already been executed. This occurs during module flash errors.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63998

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-63998 · Security Note
• https://git.kernel.org/stable/c/e96ef1a40dda5b637b1911cd950b11e9848de939 · Note
• https://git.kernel.org/stable/c/d9defbf8b62bde89e206d74c2a2b445b9ed66108 · Note
• https://twitter.com/infoflowcloud/status/2078862680941629527 · Twitter Post
• https://twitter.com/CVEnew/status/2078861446801195364 · Twitter Post
• https://git.kernel.org/stable/c/84371fb58423f997939aacdcbc02d128d76a54e5 · Note