Get real-time updates on Telegram
CVE-2026-63921: Linux 3.15
CVE-2026-63921. CVSS 3.1 base score 8.8 (HIGH, Source advisory). EPSS 0.00176 (percentile 0.06661), scored 15-Oct-2026.
Affected technology
Linux · 61220ab349485d911083d0b7990ccd3db6c63297 to before 94ff740a7f9ef5c010784a325dca00cbf228f941, 61220ab349485d911083d0b7990ccd3db6c63297 to before df42ac708acc3399bbb6dc5ca16e0540adda7bbf, 61220ab349485d911083d0b7990ccd3db6c63297 to before 44d2ff7d2178503b93151140a45dfa2ad49c9906, 61220ab349485d911083d0b7990ccd3db6c63297 to before 1acfb7d9c6fc7e209ed7789392697e97e03edd33, 61220ab349485d911083d0b7990ccd3db6c63297 to before d2236348414bdd6558385f35aa7fdc9bf5634011, 61220ab349485d911083d0b7990ccd3db6c63297 to before 853f6ea482dfcd3404bbef458ab4d68364eed838, 61220ab349485d911083d0b7990ccd3db6c63297 to before 596f6354c96a891e58c04a09cbfb7b0d1ec00dab, 61220ab349485d911083d0b7990ccd3db6c63297 to before 8b484efd5cb4eeef9021a661e198edc5349dacf6
Linux
Linux · 3.15
Linux
Component: Not specified by the source
File: net/ipv6/ip6_vti.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 8.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 35.2 /100 (P4)
- CVSS 3.1
- 8.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00176 · percentile 0.06661 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-63921.html