CVE-2026-63987

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the ethnl update profile() function within the ethtool component. The function iterates through the ETHTOOL A PROFILE IRQ MODERATION nest list using an index i and writes to new profile[i++] without proper boundary checks. While the destination is allocated for NET DIM PARAMS NUM PROFILES entries (5), the number of entries in the Netlink nest is controlled by the user. This occurs because Netlink policies do not support constraining the number of nested or multi-attribute entries.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.