Vulnerability in Linux

CVE-2026-63921

In the Linux kernel, the following vulnerability has been resolved: ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate(). After patch 1/2 in this series, vti6_update() unlinks and relinks the tunnel through t->net. vti6_siocdevprivate() st…

EPSS: 0.002 (12.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H.

Affected products

  • Linux — versions 61220ab349485d911083d0b7990ccd3db6c63297, 3.15, 0

References

Frequently asked questions

What is CVE-2026-63921?
CVE-2026-63921 is a high-severity vulnerability in Linux. CVSS score: 8.8/10. Published 2026-07-19.
How severe is CVE-2026-63921?
High severity. CVSS v3 base score is 8.8 out of 10.