CVE-2026-63809: bpf: use kvfree() for replaced sysctl write buffer
bpf: use kvfree() for replaced sysctl write buffer
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 6.6.150.1-1 - Upgrade
Upgrade
Linux kernelto a version that resolves this vulnerability.Fixed in v7.1-rc5
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63809?
CVE-2026-63809 has a severity score of 7.8, categorized as high.
What systems are affected by CVE-2026-63809?
CVE-2026-63809 affects the Linux kernel, specifically versions that utilize the BPF subsystem.
How do I fix CVE-2026-63809?
To fix CVE-2026-63809, update to the latest version of the Linux kernel that includes the required patches.
What are the potential impacts of CVE-2026-63809?
CVE-2026-63809 could lead to a memory management vulnerability that may allow unauthorized access to sensitive data.
How was CVE-2026-63809 discovered?
CVE-2026-63809 was identified during a review of the Linux kernel's BPF implementation and related sysctl handling.