Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63987

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index 'i' and writes new_profile[i++] without bounding i. The destination is kmemdup()'d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:e0e87bf6a8b0ae8ccf139f23f75add1615c2d6a79a13add250d648fafff4f89f
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ethtool/coalesce.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc","status":"affected","version":"f750dfe825b904164688adeb147950e0e0c4d262","versionType":"git"},{"lessThan":"0c02c190bcd9822477038ff2cee10ea584ac1b1d","status":"affected","version":"f750dfe825b904164688adeb147950e0e0c4d262","versionType":"git"},{"lessThan":"6205f7166d2dd14a017a5802c81e5bd1421a8635","status":"affected","version":"f750dfe825b904164688ade…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ethtool/coalesce.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.35","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.12","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ethtool/coalesce.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc","status":"affected","version":"f750dfe825b904164688adeb147950e0e0c4d262","versionType":"git"},{"lessThan":"0c02c190bcd9822477038ff2cee10ea584ac1b1d","status":"affected","version":"f750dfe825b904164688adeb147950e0e0c4d262","versionType":"git"},{"lessThan":"6205f7166d2dd14a017a5802c81e5bd1421a8635","status":"affected","version":"f750dfe825b904164688ade…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ethtool/coalesce.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.11"},{"lessThan":"6.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.93","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.35","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.12","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/metrics/0/cvssV3_1

Source references

4 source assertions
{"url":"https://git.kernel.org/stable/c/0c02c190bcd9822477038ff2cee10ea584ac1b1d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/6205f7166d2dd14a017a5802c81e5bd1421a8635"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7281b096b072f6c6e30420e3467d738f2e4c4b57"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:ea77fcfefa045b1b491bdcc7e050bdfaa6dae227a450fa05f84c2f2722147019 · sha256:e57f5a8e63e7e713… · /containers/cna/references/0

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer