CVE-2026-63864: bpf: Propagate error from visit_tailcall_insn
In the Linux kernel, the following vulnerability has been resolved:
bpf: Propagate error from visittailcallinsn
Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls") added visittailcallinsn() but did not check its return value.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63864?
CVE-2026-63864 has a severity rating of 8.4, classified as high.
How do I fix CVE-2026-63864?
To fix CVE-2026-63864, ensure that you update the Linux kernel to the latest version that includes the patch addressing this vulnerability.
What vulnerability does CVE-2026-63864 address?
CVE-2026-63864 addresses a failure to check the return value in the visit_tailcall_insn function in the Linux kernel's BPF implementation.
What systems are affected by CVE-2026-63864?
CVE-2026-63864 affects systems running vulnerable versions of the Linux kernel.
Is CVE-2026-63864 a critical vulnerability?
CVE-2026-63864 is considered critical due to its potential impact on confidentiality, integrity, and availability.