CVE-2026-63987: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES
In the Linux kernel, the following vulnerability has been resolved:
ethtool: coalesce: cap profile updates at NETDIMPARAMSNUMPROFILES
ethnlupdateprofile() walks the ETHTOOLAPROFILEIRQMODERATION nest list with an index 'i' and writes newprofile[i++] without bounding i. The destination is kmemdup()'d at NETDIMPARAMSNUMPROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
In ethnl_update_profile(), cap processing of ETHTOOL_A_PROFILE_IRQ_MODERATION nested entries at NET_DIM_PARAMS_NUM_PROFILES to prevent writes beyond the allocated new_profile array.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63987?
CVE-2026-63987 has a risk score of 55, indicating it is of moderate severity.
How do I fix CVE-2026-63987?
To fix CVE-2026-63987, update the Linux kernel to the latest version that addresses this vulnerability.
What does CVE-2026-63987 affect?
CVE-2026-63987 affects the ethtool functionality within the Linux kernel, particularly in handling profile updates.
When was CVE-2026-63987 published?
CVE-2026-63987 was published on July 19, 2026.
What is the cause of CVE-2026-63987?
CVE-2026-63987 is caused by a lack of bounds checking in the ethnl_update_profile() function when updating profile indices.