CVE-2026-63864
Received Received - Intake

BPF Tail Call Stack Liveness Error Propagation

Publication date: 2026-07-19

Last updated on: 2026-07-19

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Propagate error from visit_tailcall_insn Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls") added visit_tailcall_insn() but did not check its return value.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-07-19
Last Modified
2026-07-19
Generated
2026-07-20
AI Q&A
2026-07-19
EPSS Evaluated
N/A
NVD
CVE-2026-63864
EUVD
EUVD-2026-45548

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
linux linux_kernel *

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is in the Linux kernel's BPF (Berkeley Packet Filter) component. It involves a function called visit_tailcall_insn() which did not properly check for errors. This oversight could allow incorrect processing of tail calls in BPF programs, potentially leading to unexpected behavior or crashes.

Detection Guidance

This vulnerability is specific to the Linux kernel's BPF (Berkeley Packet Filter) component and requires kernel-level detection. Check if your kernel version includes the vulnerable commit e40f5a6bf88a by running uname -r and comparing it against patched versions. Use dmesg or journalctl to look for BPF-related errors or crashes.

Impact Analysis

If exploited, this vulnerability could cause the Linux kernel to crash or behave unpredictably. This might lead to denial-of-service conditions, system instability, or unauthorized access if an attacker crafts a malicious BPF program to trigger the flaw.

Mitigation Strategies

Update the Linux kernel to a version that includes the fix for this vulnerability. Check your distribution's security advisories for the patched kernel version and apply it immediately.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-63864. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart