SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63824

HIGH · CVSS 7.8 EPSS 0.13%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel allows for a buffer overflow due to incorrect length calculations in the keyctl_pkey_params_get_2() function when a smaller-than-necessary buffer is supplied. This could lead to potential exploitation, allowing attackers to execute arbitrary code or cause a denial of service. Organizations using affected Linux systems should prioritize patching this vulnerability to mitigate risks associated with unauthorized access or system instability.

CVE
CVE-2026-63824
Severity
HIGH
CVSS
7.8
EPSS
0.13%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.