Free and open · new CVEs checked every 20 minutesStatusRSSOpen dataContact

CVE-2026-63824: In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_

33
Routine
HIGH 7.8WATCHLISTUPGRADE

CVE-2026-63824 is a high-severity flaw (CVSS 7.8) affecting linux kernel. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.

Why this priority

  • High severity
  • On your watchlist

A fixed release or distro patch exists.

Risk facts

CVSS score7.8 (High)
Attack vectorLocal
Attack complexityLow
Privileges neededLow
User interactionNone
EPSS exploit chance0.1% (top 98%)
CISA exploited listNo
WeaknessCWE-787
Published2026-07-19
Last modified2026-10-22
Publisher (CNA): kernel.org · Vendor: linux

Am I affected?

Timeline

linux linux kernel UPGRADE
Affected: >= 4.20 and < 5.10.260 · >= 5.11 and < 5.15.211 · >= 5.16 and < 6.1.177 · >= 6.2 and < 6.6.144 · >= 6.7 and < 6.12.95 · >= 6.13 and < 6.18.38 · >= 6.19 and < 7.1.3
Fixed in: 5.10.260, 5.15.211, 6.1.177, 6.6.144, 6.12.95, 6.18.38, 7.1.3
Safe to downgrade to: no unaffected older release
Check your OS release
cat /etc/os-release; uname -r
Debian / Ubuntu
sudo apt update && sudo apt full-upgrade
RHEL / Amazon Linux / Fedora
sudo dnf upgrade --refresh
Windows
Install the latest cumulative update from Windows Update
If no patch exists yet
OS downgrades are not safe. Apply the vendor mitigation from the advisory and restrict exposure.

Exact fixes by distribution

Fedora 46 · wasmedge · FIXED · 0.18.1-1.fc46 · FEDORA-2026-4c27216e39 · source
sudo dnf upgrade --advisory=FEDORA-2026-4c27216e39
Ubuntu 22.04 · linux · FIXED · 5.15.0-198.208
sudo apt update && sudo apt install --only-upgrade linux dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux)" ge "5.15.0-198.208" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 24.04 · linux · FIXED · 6.8.0-147.147
sudo apt update && sudo apt install --only-upgrade linux dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux)" ge "6.8.0-147.147" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 20.04 · linux · NO FIX YET
Ubuntu 20.04 · linux-hwe-5.15 · FIXED · 5.15.0-198.208~20.04.1
sudo apt update && sudo apt install --only-upgrade linux-hwe-5.15 dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux-hwe-5.15)" ge "5.15.0-198.208~20.04.1" && echo PATCHED || echo STILL-VULNERABLE
Ubuntu 22.04 · linux-hwe-6.8 · NO FIX YET
Debian 12 · linux · FIXED · 6.1.177-1
sudo apt update && sudo apt install --only-upgrade linux dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux)" ge "6.1.177-1" && echo PATCHED || echo STILL-VULNERABLE
Debian 13 · linux · FIXED · 6.12.95-1
sudo apt update && sudo apt install --only-upgrade linux dpkg --compare-versions "$(dpkg-query -W -f='${Version}' linux)" ge "6.12.95-1" && echo PATCHED || echo STILL-VULNERABLE
RHEL 10 · kernel · FIXED · kernel-6.12.0-211.51.1.el10_2
sudo dnf upgrade --advisory=RHSA-2026:63128 rpm -q kernel
RHEL 9 · kernel · FIXED · kernel-5.14.0-687.44.1.el9_8
sudo dnf upgrade --advisory=RHSA-2026:63129 rpm -q kernel
RHEL 6 · kernel · NOT AFFECTED
RHEL 7 · kernel · NOT AFFECTED
RHEL 7 · kernel-rt · NOT AFFECTED
Amazon Linux 2023 · see advisory · FIXED · ALAS2023-2026-2032 · source
sudo dnf update --advisory=ALAS2023-2026-2032
Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Related CVEs

References

← Back to latest CVEs