SEPTEMBER 8, 2026
Live Feed
Back to database
Case File

CVE-2026-63864

HIGH · CVSS 8.4 EPSS 0.12%

Source: NVD + CISA KEV + EPSS · Published 2026-07-19 · Last synced 2026-08-18

CyberRota Analysis

AI-Generated

A vulnerability in the Linux kernel affects the handling of tail call instructions in BPF, where the function visit_tailcall_insn() fails to properly check its return value, potentially leading to unhandled errors. This could allow an attacker to exploit the error propagation, resulting in system instability or unauthorized access. Organizations using affected Linux distributions or F5 products should prioritize patching this vulnerability to mitigate the associated risks.

CVE
CVE-2026-63864
Severity
HIGH
CVSS
8.4
EPSS
0.12%
Linux F5

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit_tailcall_insn Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls") added visit_tailcall_insn() but did not check its return value.