Get real-time updates on Telegram
CVE-2026-63919: Linux 5.6
CVE-2026-63919. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.0065 (percentile 0.50071), scored 15-Oct-2026.
Affected technology
Linux · 7b3801927e52f8621de311277f7fc727635019e7 to before 7ee59eda8820b758ed29e1cd3222359c7b97302c, 7b3801927e52f8621de311277f7fc727635019e7 to before 2df7059a18afb7d3aee6c36cad5d371c198111d4, 7b3801927e52f8621de311277f7fc727635019e7 to before 8dfabcba6a943a7a02ebe1e1637c361ba96acbaa, 7b3801927e52f8621de311277f7fc727635019e7 to before 48ce101cd630d6745b6923b5bad8358bc4c119da, 7b3801927e52f8621de311277f7fc727635019e7 to before 55ddfc41451f01c588089cd74957a05311b6f202, 7b3801927e52f8621de311277f7fc727635019e7 to before 9f7ebb45a83afc3216e855e57d51bb4bc9b5232e, 7b3801927e52f8621de311277f7fc727635019e7 to before 9f67a36e91bb50d358760f381f233913fe5c09f8, 7b3801927e52f8621de311277f7fc727635019e7 to before c16f74dc1d75d0e2e7670076d5375deda110ebeb
Linux
Linux · 5.6
Linux
Component: Not specified by the source
File: net/xfrm/xfrm_input.c
Attack conditions (Source advisory, CVSS 3.1): Network (remote) · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.4 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.0065 · percentile 0.50071 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-63919.html