https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 19:38:15 +0000 https://vulnerability.circl.lu/vuln/cve-2026-63987 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES</p> <p>ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index &#39;i&#39; and writes new_profile[i++] without bounding i. The destination is kmemdup()&#39;d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES</p> <p>ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index &#39;i&#39; and writes new_profile[i++] without bounding i. The destination is kmemdup()&#39;d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).</p> https://vulnerability.circl.lu/vuln/cve-2026-63987