CVE-2026-68440
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_ee
CVSS
7.8
High
EPSS
0.1%
p2
KEV
—
Exploit Today
1
0-100
Published: Aug 12, 2026 · Last modified: Aug 17, 2026
0.1%EPSS · 30 days0.2%
2026-09-262026-10-25
In the Linux kernel, the following vulnerability has been resolved: net: txgbe: fix heap overflow when reading module EEPROM txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes into the caller buffer, which ethtool allocates with exactly 'length' bytes. A non-4-aligned length therefore causes an out-of-bounds write. Copy only the remaining bytes on the final dword instead.
No related CVEs by CWE or product.