18 matches found
CVE-2026-63998
A flaw was found in the Linux kernel's ethtool module. When attempting to flash transceiver modules' firmware, a validation failure could cause the ethnlopscomplete function to be skipped. This oversight means that an operation initiated by ethnlopsbegin might not be properly concluded, potential...
SUSE CVE-2026-63997
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
CVE-2026-63997
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
CVE-2026-63998
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...
CVE-2026-63998
A vulnerability exists in the Linux kernel 's ethtool module. Specifically, when validate() fails, the system was skipping the ethnl_ops_complete() function call even though ethnl_ops_begin() had already been executed. This flaw occurs during module flash errors . This issue has been resolved in ...
CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...
CVE-2026-63998 ethtool: module: call ethnl_ops_complete() on module flash errors
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...
CVE-2026-63998
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: call ethnlopscomplete on module flash errors When validate fails we are skipping over ethnlopscomplete even tho we already called ethnlopsbegin...
EUVD-2026-45570
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
CVE-2026-63997 ethtool: module: avoid leaking a netdev ref on module flash errors
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
CVE-2026-63997 ethtool: module: avoid leaking a netdev ref on module flash errors
In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...
PT-2026-61315
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ethtool module where the ethnl ops complete function is not called when validate fails, despite ethnl ops begin having already been executed. This occurs during...
Linux kernel Heap Buffer Overflow DoS
The vulnerability of the strsetreplysize function in the net/ethtool/strset.c module of the Linux kernel’s networking functions is related to access control deficiencies. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...
SUSE CVE-2025-37791
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmiscdb: use correct rpl size in ethtoolcmismodulepoll rpl is passed as a pointer to ethtoolcmismodulepoll, so the correct size of rpl is sizeofrpl which should be just 1 byte. Using the pointer size instead can cause...
Linux kernel ixgbe_maxChannels() Buffer Overflow DoS
Vulnerability of the ixgbemaxChannels function in the drivers/net/ethernet/intel/ixgbe/ixgbeethtool.c module – The Linux kernel-based Intel Ethernet network adapter driver has a vulnerability related to the use of the NULL pointer. Exploiting this vulnerability could allow an attacker to cause a...
CVE-2025-37791
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmiscdb: use correct rpl size in ethtoolcmismodulepoll rpl is passed as a pointer to ethtoolcmismodulepoll, so the correct size of rpl is sizeofrpl which should be just 1 byte. Using the pointer size instead can cause...
CVE-2025-37791
In the Linux kernel, the following vulnerability has been resolved: ethtool: cmiscdb: use correct rpl size in ethtoolcmismodulepoll rpl is passed as a pointer to ethtoolcmismodulepoll, so the correct size of rpl is sizeofrpl which should be just 1 byte. Using the pointer size instead can cause...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a vulnerability in the ethtool module...