CVE-2026-63999: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
Published Jul 19, 2026
·Updated
ethtool: rss: fix indirtable and hkey leak on getrxfh failure
Affected Software
21 affected components
Linux Linux kernel
Linux Linux kernel>=5.15.181<5.16
Linux Linux kernel>=6.1.135<6.2
Linux Linux kernel>=6.6.88<6.7
Linux Linux kernel>=6.12.24<6.13
Linux Linux kernel>=6.13.12<6.14
Linux Linux kernel>=6.14.3<6.15
Linux Linux kernel>=6.15.1<6.18.35
Linux Linux kernel>=6.19<7.0.12
Linux Linux kernel=6.15
Linux Linux kernel=6.15-rc2
Linux Linux kernel=6.15-rc3
Linux Linux kernel=6.15-rc4
Linux Linux kernel=6.15-rc5
Linux Linux kernel=6.15-rc6
Linux Linux kernel=6.15-rc7
Linux Linux kernel=7.1-rc1
Linux Linux kernel=7.1-rc2
Linux Linux kernel=7.1-rc3
Linux Linux kernel=7.1-rc4
Linux Linux kernel=7.1-rc5
Remediation
Event History
Jul 19, 2026
CVE Published
via MITRE·02:56 PM
Data Sourced
via MITRE·02:56 PM
Description
Data Sourced
via NVD·04:17 PM
RemedyDescriptionSeverityWeaknessAffected Software
Jul 21, 2026
Data Sourced
via Microsoft·08:04 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can trigger the leak?
An attacker or local user needs local access and low privileges, as reflected by the CVSS vector. Exploitation requires causing an RSS get_rxfh operation to fail after the indirection table and hash-key buffers have been allocated.
2
What is the impact of repeated failures?
Each get_rxfh failure can leave the allocated indirection table and hash-key buffer unreleased. Repeated triggering can consume kernel memory and lead to a denial of service.
3
What should be done if patching cannot happen immediately?
Limit access to local low-privilege accounts that could invoke the affected functionality, and investigate or restrict workloads that repeatedly cause RSS get_rxfh failures. A patch is available.