Medium · published July 19, 2026
In the Linux kernel, the following vulnerability has been resolved:
ethtool: rss: fix indir_table and hkey leak on get_rxfh failure
rss_prepare_get() allocates the indirection table and hash key buffer
via rss_get_data_alloc(), then calls ops->get_rxfh() to populate them.
If get_rxfh() fails, the function returns an error without freeing
the allocation.
| Product | Versions | Fixed in |
|---|---|---|
| linux/linux_kernel | ≥ 5.15.181, < 5.16 | 5.16 |
| linux/linux_kernel | ≥ 6.1.135, < 6.2 | 6.2 |
| linux/linux_kernel | ≥ 6.6.88, < 6.7 | 6.7 |
| linux/linux_kernel | ≥ 6.12.24, < 6.13 | 6.13 |
| linux/linux_kernel | ≥ 6.13.12, < 6.14 | 6.14 |
| linux/linux_kernel | ≥ 6.14.3, < 6.15 | 6.15 |
| linux/linux_kernel | ≥ 6.15.1, < 6.18.35 | 6.18.35 |
| linux/linux_kernel | ≥ 6.19, < 7.0.12 | 7.0.12 |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |
| linux/linux_kernel | all versions | — |