CVE-2026-63997

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the ethtool module where the module flash fw schedule() function fails to undo the setting of the in progress flag and the acquisition of the netdev reference during module flash errors. This leads to a netdev reference leak. By delaying these actions, the system ensures the device does not disappear while the rtnl lock is held.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.