CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

EUVD-2026-45806

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

CVE-2026-64121

CVE-2026-64121 affects the Linux kernel net:ifb subsystem where per-queue RX/TX stats were allocated using dev->num_tx_queues but walked using dev->real_num_rx_queues and dev->real_num_tx_queues. This mismatch could let ethtool stat walks read past allocated tx_private entries, triggerin...

CVE-2026-64121 net: ifb: report ethtool stats over num_tx_queues

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over numtxqueues ifbdevinit allocates dp-txprivate to dev-numtxqueues entries via kzallocobjstxp, dev-numtxqueues. Both IFB per-queue RX and TX stats live in those entries: ifbxmit updates txp-rxsta...

PT-2026-61438

In the Linux kernel, the following vulnerability has been resolved: net: ifb: report ethtool stats over num tx queues ifb dev init allocates dp-tx private to dev-num tx queues entries via kzalloc objstxp, dev-num tx queues. Both IFB per-queue RX and TX stats live in those entries: ifb xmit update...