CVE-2026-63999
Estado: Pendiente de análisisSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
rss_prepare_get() allocates the indirection table and hash key buffer via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them. If get_rxfh() fails, the function returns an error without freeing the allocation.
CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 5
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2026-63999",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "4f038a6a02d20859a3479293cbf172b0f14cbdd6",
"lessThan": "33d05c22d6f227c5ae171c46df2f6f8bf48047ea",
"versionType": "git"
},
{
"status": "affected",
"version": "4f038a6a02d20859a3479293cbf172b0f14cbdd6",
"lessThan": "80d95d92f828cfcace955d673637d944178b435f",
"versionType": "git"
},
{
"status": "affected",
"version": "4f038a6a02d20859a3479293cbf172b0f14cbdd6",
"lessThan": "266297692f97008ca48bc311775c087c59bd7fe3",
"versionType": "git"
},
{
"status": "affected",
"version": "81a5174e64ce4fb7b7a2f6499b835c904c9451ee",
"versionType": "git"
},
{
"status": "affected",
"version": "ec9faff49a4ea27731de39cb887b7e590e93157b",
"versionType": "git"
},
{
"status": "affected",
"version": "c5ed0eaddcbda56079091fc3876b140a6e70a548",
"versionType": "git"
},
{
"status": "affected",
"version": "a065b996052656a65afc51ad82336dc55ae4c72f",
"versionType": "git"
},
{
"status": "affected",
"version": "adee9db710a6117b978a25ed4153846b7c56ec9a",
"versionType": "git"
},
{
"status": "affected",
"version": "5eb3fdc4b6281b29e830300c866a36d90442b1f0",
"versionType": "git"
},
{
"status": "affected",
"version": "5.15.181",
"lessThan": "5.16",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.1.135",
"lessThan": "6.2",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.6.88",
"lessThan": "6.7",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.12.24",
"lessThan": "6.13",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.13.12",
"lessThan": "6.14",
"versionType": "semver"
},
{
"status": "affected",
"version": "6.14.3",
"lessThan": "6.15",
"versionType": "semver"
}
],
"programFiles": [
"net/ethtool/rss.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "6.15"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "6.15",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "6.18.35",
"versionType": "semver",
"lessThanOrEqual": "6.18.*"
},
{
"status": "unaffected",
"version": "7.0.12",
"versionType": "semver",
"lessThanOrEqual": "7.0.*"
},
{
"status": "unaffected",
"version": "7.1",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"net/ethtool/rss.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2026-07-19T16:17:39.477",
"references": [
{
"url": "https://git.kernel.org/stable/c/266297692f97008ca48bc311775c087c59bd7fe3",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/33d05c22d6f227c5ae171c46df2f6f8bf48047ea",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/80d95d92f828cfcace955d673637d944178b435f",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Awaiting Analysis",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nethtool: rss: fix indir_table and hkey leak on get_rxfh failure\n\nrss_prepare_get() allocates the indirection table and hash key buffer\nvia rss_get_data_alloc(), then calls ops->get_rxfh() to populate them.\nIf get_rxfh() fails, the function returns an error without freeing\nthe allocation."
}
],
"lastModified": "2026-07-30T14:51:11.223",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}