CVE-2026-63998

Source
https://cve.org/CVERecord?id=CVE-2026-63998
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-63998.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-63998
Downstream
BELL (1)
DEBIAN (1)
openSUSE (1)
SUSE (6)
UBUNTU (1)
Related
Published
2026-07-19T14:56:16Z
Modified
2026-10-24T02:36:34Z
Summary
ethtool: module: call ethnl_ops_complete() on module flash errors
Details

In the Linux kernel, the following vulnerability has been resolved:

ethtool: module: call ethnl_ops_complete() on module flash errors

When validate() fails we are skipping over ethnl_ops_complete() even tho we already called ethnl_ops_begin().

Database specific
{
    "cna_assigner": "Linux",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63998.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
32b4c8b53ee7799e34a2b1634d32d3ce1e36c44e
Fixed
170d82a57f4be1ce83de823a93bafd218a0d5fb1
Fixed
d9defbf8b62bde89e206d74c2a2b445b9ed66108
Fixed
e96ef1a40dda5b637b1911cd950b11e9848de939
Fixed
84371fb58423f997939aacdcbc02d128d76a54e5

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-63998.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
6.11.0
Fixed
6.12.114
Type
ECOSYSTEM
Events
Introduced
6.13.0
Fixed
6.18.35
Type
ECOSYSTEM
Events
Introduced
6.19.0
Fixed
7.0.12

Database specific

source
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-63998.json"