PT-2026-61316 · Linux · Linux Kernel

CVE-2026-63999 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A memory leak occurs in the ethtool RSS (Receive Side Scaling) component. The rss prepare get() function allocates the indirection table and hash key buffer through rss get data alloc(), and subsequently calls the get rxfh() function to populate them. If get rxfh() fails, the system returns an error without freeing the previously allocated memory.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63999

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-63999 · Security Note
• https://twitter.com/infoflowcloud/status/2078862718744813671 · Twitter Post
• https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f · Note
• https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3 · Note
• https://twitter.com/CVEnew/status/2078861444737651161 · Twitter Post
• https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea · Note