In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure… (CVE-2026-63999)
A vulnerability in the Linux kernel's ethtool component related to RSS (Receive Side Scaling) was resolved. The issue involved a memory leak where allocated buffers for the indirection table and hash key were not freed if a function call to get_rxfh() failed. This could lead to resource leakage in the kernel. The vulnerability has been fixed in the Linux kernel. No specific affected versions or CVSS score are provided.
AI Analysis
Technical Summary
The vulnerability in the Linux kernel's ethtool RSS implementation was due to rss_prepare_get() allocating memory for the indirection table and hash key buffer via rss_get_data_alloc(), then calling ops->get_rxfh() to populate them. If get_rxfh() failed, the function returned an error without freeing the allocated memory, causing a leak. This issue has been resolved in the Linux kernel source.
Potential Impact
The impact of this vulnerability is a memory leak in kernel space when get_rxfh() fails during RSS configuration. This could potentially lead to resource exhaustion over time but does not indicate direct code execution or privilege escalation. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this memory leak. Users and administrators should apply the official kernel updates that include this fix. Since no patch links or specific versions are provided, check the vendor or Linux kernel mailing lists for the official patch and update guidance.
In the Linux kernel, the following vulnerability has been resolved: ethtool: rss: fix indir_table and hkey leak on get_rxfh failure… (CVE-2026-63999)
Description
A vulnerability in the Linux kernel's ethtool component related to RSS (Receive Side Scaling) was resolved. The issue involved a memory leak where allocated buffers for the indirection table and hash key were not freed if a function call to get_rxfh() failed. This could lead to resource leakage in the kernel. The vulnerability has been fixed in the Linux kernel. No specific affected versions or CVSS score are provided.
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability in the Linux kernel's ethtool RSS implementation was due to rss_prepare_get() allocating memory for the indirection table and hash key buffer via rss_get_data_alloc(), then calling ops->get_rxfh() to populate them. If get_rxfh() failed, the function returned an error without freeing the allocated memory, causing a leak. This issue has been resolved in the Linux kernel source.
Potential Impact
The impact of this vulnerability is a memory leak in kernel space when get_rxfh() fails during RSS configuration. This could potentially lead to resource exhaustion over time but does not indicate direct code execution or privilege escalation. No known exploits in the wild have been reported.
Mitigation Recommendations
A fix has been implemented in the Linux kernel to address this memory leak. Users and administrators should apply the official kernel updates that include this fix. Since no patch links or specific versions are provided, check the vendor or Linux kernel mailing lists for the official patch and update guidance.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-9pm4-3wgp-cph8
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-63999"]
- Ecosystems
- []
- Database Specific Severity
- null
- Cvss Version
- null
Threat ID: 6a5d27aa2a4a8d598912df1f
Added to database: 07/19/2026, 19:38:18 UTC
Last enriched: 07/19/2026, 20:02:06 UTC
Last updated: 07/20/2026, 20:09:44 UTC
Views: 10
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.