Skip to main content
VulnerabilityPublished Updated

CVE-2026-64526: Linux kernel · ethtool: tsconfig: fix missing ethnl_ops_complete()

Affects Linux kernelSource GCVE Database

0

Not known to be exploited · fixed in 7.0.0-1010.10 : update Linux kernel when convenient.

Data as of 26 Oct 2026, 12:55 UTC

Severity
Medium

Rated by Threat Radar · No CVSS score from NVD or the CNA

EPSS
0.1% chance of exploitation in 30 days – higher than 4% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 7.0.0-1010.10, 7.0.0-1009.9, 7.0.0-1008.8 +1

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 27 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 7.0.0-1010.10, 7.0.0-1009.9, 7.0.0-1008.8 or 7.0.0-28.28.

Affected software

ProductAffectedFixed in
linux-hwe-edgeAffected
  • <7.0.0-28.28
  • <7.0.0-1009.9
  • <7.0.0-1010.10
  • <7.0.0-1008.8
Fixed in
  • 7.0.0-28.28
  • 7.0.0-1009.9
  • 7.0.0-1010.10
  • 7.0.0-1008.8

AI-suggested

A patch is available and should be applied by updating the Linux kernel to versions 7.0.0-28.28 or later as specified in the vendor advisory. After updating, a system reboot is required to apply the changes. Due to an ABI change, all third-party kernel modules must be recompiled and reinstalled. Follow the vendor's update instructions carefully to ensure full remediation.

Description

A vulnerability in the Linux kernel's ethtool tsconfig subsystem was fixed by ensuring proper calls to ethnl_ops_complete() after tsconfig_prepare_data() calls ethnl_ops_begin(). This issue was part of a broader set of Linux kernel security fixes addressing multiple subsystems. The vulnerability could potentially lead to system compromise if exploited. Patches are available and should be applied. The update requires a system reboot and recompilation of third-party kernel modules due to ABI changes.

References

Community reviews

Loading reviews…