Nixpkgs security tracker

Login with GitHub

Suggestion detail

Dismissed
(max. allowed matches exceeded)
Permalink CVE-2026-63987
7.8 HIGH
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Local (L)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): Low (L)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): High (H)
  • Integrity (I): High (H)
  • Availability (A): High (H)
  • Modified Attack Vector (MAV): Local (L)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): Low (L)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): High (H)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): High (H)
  • Modified Availability (MA): High (H)
created 5 days, 20 hours ago Activity log
  • Created & dismissed (max. allowed matches exceeded) suggestion 5 days, 20 hours ago
ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES

In the Linux kernel, the following vulnerability has been resolved: ethtool: coalesce: cap profile updates at NET_DIM_PARAMS_NUM_PROFILES ethnl_update_profile() walks the ETHTOOL_A_PROFILE_IRQ_MODERATION nest list with an index 'i' and writes new_profile[i++] without bounding i. The destination is kmemdup()'d at NET_DIM_PARAMS_NUM_PROFILES entries (5), but the Netlink nest count is entirely user-controlled. Netlink policies do not have support for constraining the number of nested entries (or number of multi-attr entries).

Affected products

Linux
  • <d4c9cc7c47781c6f4fa29d80a1193a8bcd1525bc
  • =<6.18.*
  • <0c02c190bcd9822477038ff2cee10ea584ac1b1d
  • =<7.0.*
  • =<6.12.*
  • <6.11
  • =<*
  • <7281b096b072f6c6e30420e3467d738f2e4c4b57
  • <6205f7166d2dd14a017a5802c81e5bd1421a8635
  • ==6.11