CVE-2026-63986CWE-763

CVE-2026-63986

Medium · published July 19, 2026

CVSS v3.1
5.5
EPSS
0%
Percentile
1.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure

The goto err label leads to:

genlmsg_cancel(skb, ehdr);

return ret;

If ethnl_tsinfo_prepare_dump() failed, it has not started a genlmsg.

There's nothing to cancel, and passing an error pointer to

genlmsg_cancel() would cause a crash.

The record
Technical detail
CVSS v3.1
5.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00121 · 1.8th percentile
Weakness
CWE-763 · Release of Invalid Pointer or Reference
Published
2026-07-19T20:17Z
Affected products (7)
ProductVersionsFixed in
linux/linux_kernel≥ 6.14, < 6.18.356.18.35
linux/linux_kernel≥ 6.19, < 7.0.127.0.12
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
linux/linux_kernelall versions—
References (3)
https://git.kernel.org/stable/c/2008f9bb1ede9b688624a241228b8e54fc74f0f6 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/c3fc9976f686f9a95baf87db9d387f218fd65394 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67https://git.kernel.org/stable/c/d0d2c5ccd1de28368cebeef74d9c530a60eff9a5 · 416baaa9-dc9f-4396-8d5f-8c081fb06d67
EPSS history
Timeline
  • 19 JUL 14:56Z
    ethtool: tsinfo: don't pass ERR_PTR to genlmsg_cancel on prepare failure
    cvelistv5