CVE-2026-63864
8.4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from visit_tailcall_insn
Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls") added visit_tailcall_insn() but did not check its return value.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Linux | Linux | e40f5a6bf88a781d5f81bc6b8aab9ac31d8c98dd < 945816e63c8677cf4bfde963a0774432ce8afc85 | affected |
| Linux | Linux | e40f5a6bf88a781d5f81bc6b8aab9ac31d8c98dd < 6bd96e40f31dde8f8cd79772b4df0f171cf8a915 | affected |
| Linux | Linux | 6.19 | affected |
| Linux | Linux | 0 < 6.19 | unaffected |
| Linux | Linux | 7.0.10 <= 7.0.* | unaffected |
| Linux | Linux | 7.1 <= * | unaffected |
Weaknesses
References
- https://git.kernel.org/stable/c/945816e63c8677cf4bfde963a0774432ce8afc85
- https://git.kernel.org/stable/c/6bd96e40f31dde8f8cd79772b4df0f171cf8a915
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.