Fedora Account System
Red Hat Associate
Red Hat Customer
In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index 'i' and writes new_profile[i++] without bounding i. The destination is kmemdup()'d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).
Upstream advisory: https://lore.kernel.org/linux-cve-announce/2026071903-CVE-2026-63987-bda5@gregkh/T
This issue has been addressed in the following products: Red Hat Enterprise Linux 9 Via RHSA-2026:93930 https://access.redhat.com/errata/RHSA-2026:93930
This issue has been addressed in the following products: Red Hat Enterprise Linux 10 Via RHSA-2026:97040 https://access.redhat.com/errata/RHSA-2026:97040
This issue has been addressed in the following products: Red Hat Enterprise Linux 10.2 Extended Update Support Via RHSA-2026:99139 https://access.redhat.com/errata/RHSA-2026:99139