Search: CVE-2026-64121

A vulnerability in the Linux kernel's Intermediate Functional Block (IFB) network driver caused ethtool statistics reporting to access memory beyond allocated bounds when the device has more RX queues than TX queues. This could lead to out-of-bounds reads and potential information disclosure. The issue was identified and fixed by ensuring consistent use of the TX queue count for stats reporting. The vulnerability has a CVSS score of 7.1 and affects multiple Linux kernel versions prior to 7.0.0-28.28 and several specific older versions. A patch is available and has been incorporated in updated kernel releases.