CVE-2026-64121

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 7.1-rc2

Description An issue exists in the Intermediate Functional Block (IFB) driver where ethtool statistics are reported incorrectly. The ifb dev init() function allocates memory for dp->tx private based on dev->num tx queues. However, the ethtool stats callbacks use dev->real num rx queues and dev->real num tx queues to size and traverse the per-queue statistics. In scenarios with asymmetric devices where the RX queue count is higher than the TX queue count, the ifb get ethtool stats() function can index beyond the allocated tx private memory, leading to a slab-out-of-bounds read and the copying of adjacent slab data through ETHTOOL GSTATS.

Recommendations Update the Linux kernel to version 7.1-rc2 or later.