CVE-2026-68440 is a vulnerability in Linux Kernel
Published on August 12, 2026
net: txgbe: fix heap overflow when reading module EEPROM
In the Linux kernel, the following vulnerability has been resolved:
net: txgbe: fix heap overflow when reading module EEPROM
txgbe_read_eeprom_hostif() always copies round_up(length, 4) bytes
into the caller buffer, which ethtool allocates with exactly 'length'
bytes. A non-4-aligned length therefore causes an out-of-bounds write.
Copy only the remaining bytes on the final dword instead.
Products Associated with CVE-2026-68440
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 9b97b6b5635b3de18debd07a3adcf25198ec8299 and below febcced6958158e7e90a55a8567b3f5c3639c0b9 is affected.
- Version 9b97b6b5635b3de18debd07a3adcf25198ec8299 and below 6a905a71fd43ce8b45f05044b11491337f232c9d is affected.
- Version 6.19 is affected.
- Before 6.19 is unaffected.
- Version 7.1.6, <= 7.1.* is unaffected.
- Version 7.2-rc5, <= * is unaffected.