CVE-2026-63823: Linux 2.6.16

Affected technology

Linux · b5f545c880a2a47947ba2118b2509644ab7a2969 to before d8274181b0f28d450b42489723a5ba81042158d7, b5f545c880a2a47947ba2118b2509644ab7a2969 to before 4982bfabce6b33b3c9eddb4fb900fe5568b7cf91, b5f545c880a2a47947ba2118b2509644ab7a2969 to before 708709c65a1832a99b0eef8ae46e343ddaca3d06, b5f545c880a2a47947ba2118b2509644ab7a2969 to before 35ab4db86774d82389e4b9559e26ab7f68d8e395, b5f545c880a2a47947ba2118b2509644ab7a2969 to before f9b68632ac93cc742f2e411021c4dbfe452ea0c2, b5f545c880a2a47947ba2118b2509644ab7a2969 to before 7216ce8cb12fee44e309503955bb83806b106129, b5f545c880a2a47947ba2118b2509644ab7a2969 to before 83c0a1cb296d955d5f4d1f0bd8a769ba8ed8c29f, b5f545c880a2a47947ba2118b2509644ab7a2969 to before fd15b457a86939c38aa12116adabd8ff686c5e51
Linux

Linux · 2.6.16
Linux

Component: Not specified by the source
File: include/keys/request_key_auth-type.h, security/keys/internal.h, security/keys/keyctl.c, security/keys/request_key_auth.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.