Dashboard / CVE-2026-63824

CVE-2026-63824

HIGH
MEDIUM Priority: 0.01 BB Relevance: 41/100
Published: 2026-07-19 Modified: 2026-10-22 First seen: 2026-10-29 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: High
I: High
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.

Weakness Classification (1)

Affected Software (1)

VendorProductVersion
linux linux_kernel 4.20 – 5.10.260

References & Advisories (8)

Bug Bounty Relevance

41 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

7.8 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.17%
Raw Score 0.001690
Percentile 6.3%
Date 2026-10-29

EPSS Trend

2026-10-29
0.00169
2026-10-28
0.00169

Intelligence Sources

nvd ref →

External Links