Beveiligingsadvies

CVE-2026-63824

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-19 12:02:20
Laatst bijgewerkt 2026-08-17 04:51:32
Toegewezen door Linux
CVSS-score 7.8
Status PUBLISHED

Beschrijving

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.