CVE-2026-63914: Linux 2.6.21

Affected technology

Linux · 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before bafc7d0774b9bf52909c70ed990bc5ccf7ec4bad, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before 6df8157547347b5257bf640a0ae3dfc4411e06cd, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before fe463798343382c8fe9416a95959f005a3c30aa5, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before 00f2c451e57df50b1151d9b2254878f106b7c892, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before a306cf2ac8849c487791369fad6f216399d000f6, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before 448bb92ca101dde8a6e88b4dc824044b4e341604, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before 26ce8dbf2e23fe4fcc3351d19ef6d3fb703ed126, 5c79de6e79cd8ecfbae28886be3ee49044f3a4d4 to before 7e2a4f7ca0952820731ef7bdadfc9a9e9d3571b4
Linux

Linux · 2.6.21
Linux

Component: Not specified by the source
File: include/net/xfrm.h, net/key/af_key.c, net/xfrm/xfrm_policy.c, net/xfrm/xfrm_state.c, net/xfrm/xfrm_user.c

Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

Source advisory’s CVSS 3.1 assessment (base score 7.3/10) rates confidentiality impact as high; integrity impact as none; availability impact as low. The description does not specify what an attacker can achieve beyond these rated impacts.