CVE-2026-63986
N/A
N/A
Summary
In the Linux kernel, the following vulnerability has been resolved:
ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure
The goto err label leads to:
genlmsg_cancel(skb, ehdr);
return ret;
If ethnl_tsinfo_prepare_dump() failed, it has not started a genlmsg. There's nothing to cancel, and passing an error pointer to genlmsg_cancel() would cause a crash.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | b9e3f7dc9ed95daeb83cfa45b821cacaa01aa906 < 2008f9bb1ede9b688624a241228b8e54fc74f0f6 | affected |
| Linux | Linux | b9e3f7dc9ed95daeb83cfa45b821cacaa01aa906 < d0d2c5ccd1de28368cebeef74d9c530a60eff9a5 | affected |
| Linux | Linux | b9e3f7dc9ed95daeb83cfa45b821cacaa01aa906 < c3fc9976f686f9a95baf87db9d387f218fd65394 | affected |
| Linux | Linux | 6.14 | affected |
| Linux | Linux | 0 < 6.14 | unaffected |
| Linux | Linux | 6.18.35 <= 6.18.* | unaffected |
| Linux | Linux | 7.0.12 <= 7.0.* | unaffected |
| Linux | Linux | 7.1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/2008f9bb1ede9b688624a241228b8e54fc74f0f6
- https://git.kernel.org/stable/c/d0d2c5ccd1de28368cebeef74d9c530a60eff9a5
- https://git.kernel.org/stable/c/c3fc9976f686f9a95baf87db9d387f218fd65394
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.