High 7.8Published Jul 19, 2026

CVE-2026-63987ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

Updated under an hour ago (Oct 28, 2026, 11:50 AM ET)

Does this affect you?

It affects Linux and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Linux

Exploited in the last 30 days

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index 'i' and writes new_profile[i++] without bounding i. The destination is kmemdup()'d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).

CVSS: 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness (CWE): CWE-787
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: Linux
NVD analysis: Modified
Record last updated: Oct 19, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

Linux Linux linux:linux (from the name)	from f750dfe825b904164688adeb147950e0e0c4d262 before d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc; from f750dfe825b904164688adeb147950e0e0c4d262 before 0c02c190bcd9822477038ff2cee10ea584ac1b1d; from f750dfe825b904164688adeb147950e0e0c4d262 before 6205f7166d2dd14a017a5802c81e5bd1421a8635; from f750dfe825b904164688adeb147950e0e0c4d262 before 7281b096b072f6c6e30420e3467d738f2e4c4b57	CNA record
linux linux_kernel linux:linux_kernel	from 6.11 before 6.12.93; from 6.13 before 6.18.35; from 6.19 before 7.0.12; 7.1; 7.1; 7.1; 7.1; 7.1	NVD

References

References

https://git.kernel.org/stable/c/d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc	patch
https://git.kernel.org/stable/c/0c02c190bcd9822477038ff2cee10ea584ac1b1d	patch
https://git.kernel.org/stable/c/6205f7166d2dd14a017a5802c81e5bd1421a8635	patch
https://git.kernel.org/stable/c/7281b096b072f6c6e30420e3467d738f2e4c4b57	patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.