Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63823

In the Linux kernel, the following vulnerability has been resolved: keys: Pin request_key_auth payload in instantiate paths A: request_key() B: KEYCTL_INSTANTIATE_IOV ================ ========================= create auth key store rka in auth key wait for helper get auth key load rka from auth key copy user payload sleep on #PF helper completed detach and free rka destroy auth key
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:4fe96ddaba1924dbd38679586f3c0e09d40c454725741047fb4ff8944a54e613
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/keys/request_key_auth-type.h","security/keys/internal.h","security/keys/keyctl.c","security/keys/request_key_auth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d8274181b0f28d450b42489723a5ba81042158d7","status":"affected","version":"b5f545c880a2a47947ba2118b2509644ab7a2969","versionType":"git"},{"lessThan":"4982bfabce6b33b3c9eddb4fb900fe5568b7cf91","status":"affected","version":"b5f545c880a2a47947ba2118b2509644ab7a2969","versionType":"git"},{"lessTh…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["include/keys/request_key_auth-type.h","security/keys/internal.h","security/keys/keyctl.c","security/keys/request_key_auth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.16"},{"lessThan":"2.6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semve…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["include/keys/request_key_auth-type.h","security/keys/internal.h","security/keys/keyctl.c","security/keys/request_key_auth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"d8274181b0f28d450b42489723a5ba81042158d7","status":"affected","version":"b5f545c880a2a47947ba2118b2509644ab7a2969","versionType":"git"},{"lessThan":"4982bfabce6b33b3c9eddb4fb900fe5568b7cf91","status":"affected","version":"b5f545c880a2a47947ba2118b2509644ab7a2969","versionType":"git"},{"lessTh…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["include/keys/request_key_auth-type.h","security/keys/internal.h","security/keys/keyctl.c","security/keys/request_key_auth.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"2.6.16"},{"lessThan":"2.6.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.260","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.211","versionType":"semve…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":7.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/35ab4db86774d82389e4b9559e26ab7f68d8e395"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/4982bfabce6b33b3c9eddb4fb900fe5568b7cf91"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/708709c65a1832a99b0eef8ae46e343ddaca3d06"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/7216ce8cb12fee44e309503955bb83806b106129"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/83c0a1cb296d955d5f4d1f0bd8a769ba8ed8c29f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/d8274181b0f28d450b42489723a5ba81042158d7"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/f9b68632ac93cc742f2e411021c4dbfe452ea0c2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/fd15b457a86939c38aa12116adabd8ff686c5e51"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:f90a9791a1c70da493cb4b868e96f257272032acfa2d1aecd40c9bc168274a27 · sha256:eab2d068dd06e6bd… · /containers/cna/references/7

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer