PT-2026-61140 · Linux · Linux Kernel

CVE-2026-63824 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An overflow occurs in the keyctl pkey params get 2() function due to an incorrect calculation of the internal output buffer length. This issue manifests when a buffer that is too small is provided, potentially leading to a buffer overflow (a condition where data exceeds the boundary of a fixed-length block of memory).

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-63824

Affected Products

Linux Kernel

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2026-63824 · Security Note
• https://git.kernel.org/stable/c/5966e4e2ba213ab7ad559166152eb4f1f170dd2c · Note
• https://git.kernel.org/stable/c/cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0b · Note
• https://git.kernel.org/stable/c/0f3058d7d26f81df9b68a18ddbe164bdc3c5eff3 · Note
• https://twitter.com/VulmonFeeds/status/2078871541538783390 · Twitter Post
• https://git.kernel.org/stable/c/622ec2dcd59f21623f2a7ab773c80ceb7d555e3a · Note
• https://git.kernel.org/stable/c/b1e247338bc71826a2d2def3e0874c34749df69a · Note
• https://git.kernel.org/stable/c/5165f1cc727f1322456735df212d8e26ec237a8d · Note
• https://git.kernel.org/stable/c/670fc6a311ed321522b7fff92cf0fc376b4f6e78 · Note
• https://git.kernel.org/stable/c/b11c1fa32667692a2c0566e10163758e786e430c · Note