CVE-2026-64121

A flaw was found in the Linux kernel's Intermediate Functional Block ifb network device. A local user with network configuration privileges can trigger a slab-out-of-bounds read by configuring an asymmetric ifb device and querying its ethtool statistics. This vulnerability can lead to a kernel...

CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

CVE-2026-64121

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

EUVD-2026-45806

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

CVE-2026-64121

CVE-2026-64121 affects the Linux kernel net:ifb subsystem where per-queue RX/TX stats were allocated using dev->num_tx_queues but walked using dev->real_num_rx_queues and dev->real_num_tx_queues. This mismatch could let ethtool stat walks read past allocated tx_private entries, triggerin...

CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

PT-2026-61438

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc2 Description An issue exists in the Intermediate Functional Block IFB driver where ethtool statistics are reported incorrectly. The ifb dev init function allocates memory for dp-tx private based on dev-num...