CVE-2026-63995

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds write can occur in the CMIS firmware update code within the ethtool component. The issue arises because the system reads the start cmd payload size from the module's FW Management Features CDB reply and uses it as the byte count for a memcpy() operation without proper validation. Since the destination buffer is limited to 112 bytes, a malicious or corrupted module response can trigger a memory write beyond the buffer boundaries in the cmis fw update start download() function.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.