CVE-2026-68440: net: txgbe: fix heap overflow when reading module EEPROM
In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: fix heap overflow when reading module EEPROM
txgbereadeepromhostif() always copies roundup(length, 4) bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore causes an out-of-bounds write. Copy only the remaining bytes on the final dword instead.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Update txgbe_read_eeprom_hostif() to avoid the heap overflow by copying only the remaining bytes for the final dword; do not always copy round_up(length, 4) bytes into the caller buffer (allocated with exactly 'length').
Linux kernel (net: txgbe) txgbe_read_eeprom_hostif() memcpy behavior = Copy only the remaining bytes on the final dword instead of round_up(length, 4)
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68440?
CVE-2026-68440 has a severity rating of 53.
How do I fix CVE-2026-68440?
To fix CVE-2026-68440, update the Linux kernel to the latest patched version that addresses the heap overflow issue.
What systems are affected by CVE-2026-68440?
CVE-2026-68440 affects systems running vulnerable versions of the Linux kernel that utilize the txgbe network driver.
What type of vulnerability is CVE-2026-68440?
CVE-2026-68440 is classified as a heap overflow vulnerability.
What is the impact of CVE-2026-68440?
The impact of CVE-2026-68440 could allow an attacker to cause a denial of service or potentially execute arbitrary code through the affected system.