Linux kernel RSS DoS

The vulnerability of the rssprepareget function in the net/ethtool/rss.c module, which is part of the Linux kernel’s networking functions, relates to the failure to release resources after their useful life has ended. Exploiting this vulnerability could allow an attacker to cause service failures...

CVE-2026-63999: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indirtable and hkey leak on getrxfh failure rssprepareget allocates the indirection table and hash key buffer via rssgetdataalloc, then calls ops-getrxfh to populate them. If getrxfh fails, the function returns ...

Linux Kernel Security Vulnerabilities

The Linux kernel has a security vulnerability that stems from the rss function in ethtool. The rssprepareget function fails when getting the rxfh, and does not release the allocated indirect tables and hash key buffers, resulting in a memory leak...

CVE-2025-38402: NULL Pointer Dereference

In the Linux kernel, the following vulnerability has been resolved: idpf: return 0 size for RSS key if not supported Returning -EOPNOTSUPP from function returning u32 is leading to cast and invalid size value as a result. -EOPNOTSUPP as a size probably will lead to allocation fail. Command: ethto...