A vulnerability, which was classified as critical, has been found in Linux Kernel up to 6.12.79/6.18.20/6.19.10. Affected is the function
iavf_get_ethtool_stats of the component iavf. Performing a manipulation results in out-of-bounds write.
This vulnerability was named CVE-2026-31505. The attack needs to be approached within the local network. There is no available exploit.
It is advisable to upgrade the affected component.
