The vulnerability of the module_flash_fw_schedule() function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, allows a hacker to cause a service failure.

The vulnerability of the moduleflashfwschedule function in the net/ethtool/module.c module, which is part of the Linux kernel’s networking functions, involves a situation where resources are not released after their useful period has ended. Exploiting this vulnerability could allow an attacker to...

CVE-2026-63997: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors moduleflashfwschedule is missing undo for setting the "inprogress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we a...

CVE-2024-47742 firmware_loader: Block path traversal

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...

CVE-2024-47742: Improper Limitation of a Pathname to a Restricted Directory

In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructed from fairly constrained format strings where the dynamic parts are just some hex numbers or such. However, there are a couple...