Linux Kernel RSS Key Handling Vulnerability Leading to Memory Allocation Errors

Vulnerability

A vulnerability in the Linux kernel's handling of Receive Side Scaling (RSS) keys has been identified. When the RSS capability is not supported on certain devices, the kernel incorrectly returns a size of zero for the RSS key. This erroneous size leads to memory allocation failures. The issue arises in the 'ethtool' command when querying network interfaces that lack RSS capabilities.

Impact

The vulnerability can cause memory allocation failures, which may disrupt normal kernel operations and potentially lead to system instability.

Reproduction

The vulnerability can be reproduced by using the 'ethtool -x' command on a network interface that does not have RSS capabilities enabled. This will trigger the kernel to return an invalid size for the RSS key, leading to a memory allocation failure.

Added: Jul 25, 2025, 1:26 PM
Updated: Jul 25, 2025, 5:57 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
5.7
remediation
0.0
relevance
0.3
threat
4.8
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.