Get real-time updates on Telegram
CVE-2026-68377: Linux 5.0
CVE-2026-68377. CVSS 3.1 base score 7.8 (HIGH, Source advisory). EPSS 0.00128 (percentile 0.02149), scored 15-Oct-2026.
Affected technology
Linux · 9174c3df1cd181c14913138d50ccbe539bb08335 to before b5931f020b681fdcb9378262d89b61cb3c7ebbf8, 9174c3df1cd181c14913138d50ccbe539bb08335 to before 389d03992dabb80488228e8119b9dd6d0f58e1a6, 9174c3df1cd181c14913138d50ccbe539bb08335 to before 676ad6aa7cec89a08d2a5ce3cd5959e313f29733, 9174c3df1cd181c14913138d50ccbe539bb08335 to before 531dbb5bb98e52ad26be7e90f9f8bec707c5bd0e, 9174c3df1cd181c14913138d50ccbe539bb08335 to before 2200a00ff247f70f5dcdb4e6f14b0d48ddac5467, 9174c3df1cd181c14913138d50ccbe539bb08335 to before fed1b1ddab41a0e7a462ac690a0c8af6ff793624, 9174c3df1cd181c14913138d50ccbe539bb08335 to before 2791a501da508b704a617b4dba29db54a65bc9f7, 9174c3df1cd181c14913138d50ccbe539bb08335 to before f1f5c8a3955f8fda3f84ed883ac8daa1847e724c, 02239e797ac75f89a05622a27d04695f08c1ca89, ca9b7a65a2c97579fcdd509d454d48e3a5c49af8, 4.19.19 to before 4.20, 4.20.6 to before 4.21
Linux
Linux · 5.0
Linux
Component: Not specified by the source
Function: releases
File: net/sched/act_tunnel_key.c
Attack conditions (Source advisory, CVSS 3.1): Local · Low privileges required · No user interaction required
What an attacker can do
Source advisory’s CVSS 3.1 assessment (base score 7.8/10) rates confidentiality, integrity and availability impact as high. The description does not specify what an attacker can achieve beyond these rated impacts.
- CCR priority
- 31.2 /100 (P4)
- CVSS 3.1
- 7.8 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · Source advisory
- EPSS
- 0.00128 · percentile 0.02149 · 2026-10-15
- KEV
- no
Provenance
- NVD CVE API 2.0 · Source record · observed 2026-10-16 16:55:38.548135+00:00 UTC
Stable permalink: https://cybercodered.org/item/cve-cve-2026-68377.html