CVE-2026-63986

A flaw was found in the Linux kernel's ethtool: tsinfo component. This vulnerability occurs when the ethnl_tsinfo_prepare_dump() function fails to properly initialize a generic netlink message (genlmsg) but still attempts to cancel it by passing an error pointer. This improper error handling can lead to a system crash, resulting in a Denial of Service (DoS) for the affected system.

Red Hat rates this vulnerability as Moderate because it enables a local user to cause a kernel panic, resulting in a denial of service, without compromising data confidentiality or system integrity. The flaw is triggered through the kernel network interface configuration framework when an error condition is encountered during netlink queries for timestamping parameters. Because exploitation cannot be executed remotely and does not lead to elevated privileges, the overall blast radius is confined to host availability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.