In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: fix heap overflow when reading module EEPROM
txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore causes an out-of-bounds write. Copy only the remaining bytes on the final dword instead.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-azure-fdeUpgrade linux-image-oracle-64k-7.0Upgrade linux-image-oracle-7.0Upgrade linux-image-7.0.0-1008-gke-64kUpgrade linux-image-azure-lts-26.04Upgrade linux-image-azure-fde-7.0Upgrade linux-image-generic-64kUpgrade linux-image-7.0.0-38-generic-64kUpgrade linux-image-gcpUpgrade linux-image-7.0.0-1008-gkeUpgrade linux-image-7.0.0-1013-oracleUpgrade linux-image-gke-64k-7.0Upgrade linux-image-gke-64kUpgrade linux-image-oem-26.04Upgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-azure-7.0Upgrade linux-image-7.0.0-1015-oemUpgrade linux-image-7.0.0-38-genericUpgrade linux-image-oem-26.04aUpgrade linux-image-oracle-64kUpgrade linux-image-virtual-hwe-26.04Upgrade linux-image-7.0.0-1014-awsUpgrade linux-image-7.0.0-1014-gcp-64kUpgrade linux-image-genericUpgrade linux-image-realtime-64k-hwe-26.04Upgrade linux-image-ibm-7.0Upgrade linux-image-7.0.0-1015-ibmUpgrade linux-image-ibmUpgrade linux-image-7.0.0-38-realtime-64kUpgrade linux-image-gcp-64kUpgrade linux-image-realtime-64kUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-generic-64k-7.0Upgrade linux-image-generic-hwe-26.04Upgrade linux-image-gcp-64k-7.0Upgrade linux-image-7.0.0-1013-oracle-64kUpgrade linux-image-realtimeUpgrade linux-image-7.0.0-1014-gcpUpgrade linux-image-aws-64k-7.0Upgrade linux-image-7.0.0-38-realtimeUpgrade linux-image-gke-64k-hwe-26.04Upgrade linux-image-7.0.0-1016-azure-fdeUpgrade linux-image-gkeUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-azure-fde-lts-26.04Upgrade linux-image-generic-64k-hwe-26.04Upgrade linux-image-realtime-7.0Upgrade linux-image-realtime-64k-7.0Upgrade linux-image-oem-7.0Upgrade linux-image-7.0.0-1014-aws-64kUpgrade linux-image-generic-7.0Upgrade linux-image-gcp-7.0Upgrade linux-image-7.0.0-1017-azureUpgrade linux-image-realtime-hwe-26.04Upgrade linux-image-oracleUpgrade linux-image-awsUpgrade linux-image-virtual-7.0Upgrade linux-image-aws-64kUpgrade linux-image-gke-hwe-26.04Upgrade linux-image-virtualUpgrade linux-image-gke-7.0Upgrade linux-image-aws-7.0 | Oct 7, 2026 | Oct 6, 2026 |
Prioritize with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub