P4Verified

CVE-2026-63991: linux kernel from 3.14 (inclusive), before 5.10.259 (exclusive), from 5.11 (inclusive), before 5.15.210 (exclusive)…

CVE-2026-63991. CVSS 3.1 base score 5.5 (MEDIUM, NVD). EPSS 0.0022 (percentile 0.11346), scored 2026-10-06.

Affected technology

linux kernel · from 3.14 (inclusive), before 5.10.259 (exclusive)
linux

linux kernel · from 5.11 (inclusive), before 5.15.210 (exclusive)
linux

linux kernel · from 5.16 (inclusive), before 6.1.176 (exclusive)
linux

linux kernel · from 6.2 (inclusive), before 6.6.143 (exclusive)
linux

linux kernel · from 6.7 (inclusive), before 6.12.93 (exclusive)
linux

linux kernel · from 6.13 (inclusive), before 6.18.35 (exclusive)
linux

linux kernel · from 6.19 (inclusive), before 7.0.12 (exclusive)
linux

linux kernel · 7.1 · update rc1
linux

linux kernel · 7.1 · update rc2
linux

linux kernel · 7.1 · update rc3
linux

linux kernel · 7.1 · update rc4
linux

linux kernel · 7.1 · update rc5
linux

Linux · 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 9afcb5ea080af13aab37930da627db43bd277665, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 9903a04becf059e44cccf625e23689b7d4378384, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before d630c4b25f36e0e68461561e4c70957ec37fdedd, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before b06203ac5f12929d79146bb9f063c2af1d679e63, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 3d5d81d294ba09487c86bc4ba33dc4a4bec5d215, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before e673889a35a5e4c586d0fae67d8755ca4367d3e2, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 2061d080a013c0ec0a56162cd501fb36d2befc26, 18722c247023035b9e2e2a08a887adec2a9a6e49 to before 3c40d381ce04f9575a5d8b542898183c3b4b38dc
Linux

Linux · 3.14
Linux

Component: Not specified by the source
Function: can
File: net/bluetooth/6lowpan.c

Attack conditions (NVD, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

NVD’s CVSS 3.1 assessment (base score 5.5/10) rates confidentiality and integrity impact as none; availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.

Published 2026-10-07 23:05:54.394251+00:00

CWE: CWE-476
CCR priority: 22.1 /100 (P4)
CVSS 3.1: 5.5 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · NVD
EPSS: 0.0022 · percentile 0.11346 · 2026-10-06
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-07 23:02:50.240617+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-63991.html