Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63917

In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_changelink(). ip netns add ns1 ip netns add ns2 ip -n ns1 link add vti6_test type vti6 remote ::1 local ::2 key 7 ip -n ns1 link set vti6_test netns ns2 ip -n ns2 link set vti6_test type vti6 remote ::3 local ::4 key 9 ip netns del ns2 ip netns del ns1 [ 132.495484] ------------[ cut here ]------------ [ 132.497609] kernel BUG at net/core/dev.c:12376! Commit 61220ab34948 ("vti6: Enable name
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:ee726da5f67dedde0a07edcaadddb50ce0c8b1bc4e0f09b0ab7bc011b460f3bb
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/ip6_vti.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0cdce7618464f7fb06f461e8f4ad575cb1d570f4","status":"affected","version":"61220ab349485d911083d0b7990ccd3db6c63297","versionType":"git"},{"lessThan":"f5c68875e25f331e497ddfbe81e2d8163a87f136","status":"affected","version":"61220ab349485d911083d0b7990ccd3db6c63297","versionType":"git"},{"lessThan":"d9c5eecdb3c740e65038651db7c686b10d76d1bc","status":"affected","version":"61220ab349485d911083d0b7990…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/ip6_vti.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.15"},{"lessThan":"3.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["net/ipv6/ip6_vti.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"0cdce7618464f7fb06f461e8f4ad575cb1d570f4","status":"affected","version":"61220ab349485d911083d0b7990ccd3db6c63297","versionType":"git"},{"lessThan":"f5c68875e25f331e497ddfbe81e2d8163a87f136","status":"affected","version":"61220ab349485d911083d0b7990ccd3db6c63297","versionType":"git"},{"lessThan":"d9c5eecdb3c740e65038651db7c686b10d76d1bc","status":"affected","version":"61220ab349485d911083d0b7990…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["net/ipv6/ip6_vti.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"3.15"},{"lessThan":"3.15","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.259","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.210","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.176","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/metrics/0/cvssV3_1

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/0cdce7618464f7fb06f461e8f4ad575cb1d570f4"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/11b326fb0a374f4654f9be22d0f0f7abd9f7d3fe"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/225b467e3b631f38be22e4b38062a1fed02fdd21"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/d9c5eecdb3c740e65038651db7c686b10d76d1bc"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/ee1778ba0f5cb53be771f97017d01eb356c797bf"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/f1e89a943ee574d0f2f16246eb3f2d7330fdeb03"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f5c68875e25f331e497ddfbe81e2d8163a87f136"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/fc32be9ac2788524c6b24efd681cce7a6e731a92"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:90881bd0ba2b46bbfc1139442e2f3ecd5c82da8cd2c6d2e5a46128a8492ea174 · sha256:f00872a0374bef70… · /containers/cna/references/5

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer