Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63809

In the Linux kernel, the following vulnerability has been resolved: bpf: use kvfree() for replaced sysctl write buffer proc_sys_call_handler() allocates its temporary sysctl buffer with kvzalloc() and passes it to __cgroup_bpf_run_filter_sysctl(). Since kvzalloc() may fall back to vmalloc() for large allocations, freeing that buffer with kfree() is wrong and can corrupt memory. Use kvfree() to safely handle both kmalloc and kvzalloc()/vmalloc allocations. The bug was first flagged by an expe
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d1cc7b03206875629f1997d3296947ae8666520aa7dede53f6ea5a60d79b4f62
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.12"},{"lessThan":"5.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessThanO…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d0a81ed5ff5d0f9c3f63a4f9e5a4642c363ecd3e","status":"affected","version":"b7925acd82926ebbf94a0f0783a3961f4e558856","versionType":"git"},{"lessThan":"77355ef7a9f6b0d2bdf65be3b37f2c1f365e20d2","status":"affected","version":"4508943794efdd94171549c0bd52810e2f4ad9fe","versionType":"git"},{"lessThan":"e1d1e203a6000804c5d3b8a4aa4e52303c0c7ab2","status":"affected","version":"4508943794efdd94171549c0bd…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.12"},{"lessThan":"5.12","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.177","versionType":"semver"},{"lessThanO…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/cgroup.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d0a81ed5ff5d0f9c3f63a4f9e5a4642c363ecd3e","status":"affected","version":"b7925acd82926ebbf94a0f0783a3961f4e558856","versionType":"git"},{"lessThan":"77355ef7a9f6b0d2bdf65be3b37f2c1f365e20d2","status":"affected","version":"4508943794efdd94171549c0bd52810e2f4ad9fe","versionType":"git"},{"lessThan":"e1d1e203a6000804c5d3b8a4aa4e52303c0c7ab2","status":"affected","version":"4508943794efdd94171549c0bd…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/affected/0

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/4c21b5927d4364bfe7365f2700da5fea0ed0d004"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/65bd0c0afb0e1bf3287458e342429b069624f7d4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/70df4de46577fab5e25418f014583155a147c902"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/77355ef7a9f6b0d2bdf65be3b37f2c1f365e20d2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/81fc9a13acae99966232f0e055eb2e445263b89a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/838fe9c28121777c59a9406710a68fcf77bb8017"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d0a81ed5ff5d0f9c3f63a4f9e5a4642c363ecd3e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/e1d1e203a6000804c5d3b8a4aa4e52303c0c7ab2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:2317f999ae926bdf61fd59e32208f2c88e4ae2ebea2947e632f58aac450a2693 · sha256:a12f89b048ec1dab… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer