CVE-2026-63997: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: ethtool: module: avoid leaking a netdev ref on module flash errors module_flash_fw_schedule() is missing undo for setting the "in_progress" flag and taking the netdev reference. Delay taking these, the device can't disappear while we are holding rtnl_lock.

Засегнати продукти

• Linux Linux: 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e преди f7b4513e77f9571dc1041a798b93b5c4a4bfc191; 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e преди 61848c83b9132ab839809fe415ba7802a0aca4f6; 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e преди 956b134d917fd7e014dc7e39a9b7610c04fcc9ba; 32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e преди fb7f511d62692661846c47f199e0afe25c2982db
• Linux Linux: 6.11; преди 6.11; 6.12.93 до 6.12.*; 6.18.35 до 6.18.*; 7.0.12 до 7.0.*; от 7.1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-63997
• https://nvd.nist.gov/vuln/detail/CVE-2026-63997
• https://git.kernel.org/stable/c/f7b4513e77f9571dc1041a798b93b5c4a4bfc191
• https://git.kernel.org/stable/c/61848c83b9132ab839809fe415ba7802a0aca4f6
• https://git.kernel.org/stable/c/956b134d917fd7e014dc7e39a9b7610c04fcc9ba
• https://git.kernel.org/stable/c/fb7f511d62692661846c47f199e0afe25c2982db