What is the CVSS score of CVE-2026-63864?

CVE-2026-63864 has a CVSS 3.1 base score of 8.4 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Linux are affected by CVE-2026-63864?

A memory-safety flaw in the Linux kernel eBPF verifier (CVE-2026-63864) allows attackers to bypass program validation controls and compromise system security with high impact on confidentiality,…. A patch is available.

How to fix or mitigate CVE-2026-63864?

Within 24 hours, conduct a complete inventory of Linux systems across the infrastructure and document kernel versions in use, prioritizing identification of critical production systems, security appliances, and systems running BPF-based workloads. Within 7 days, apply vendor patches to test and non-production environments by upgrading to Linux kernel 6.19, stable 7.0.10, or 7.1, validating system functionality and BPF program behavior during the upgrade cycle. Within 30 days, complete patching of all production systems and perform final validation that no workload disruptions or monitoring gaps occurred during the transition.

Linux CVE-2026-63864

EUVD-2026-45548 HIGH

2026-07-19 Linux

GHSA-xw7r-6m22-6cfw

Information Disclosure Linux

8.4

CVSS 3.1 · Vendor: Linux

Severity by source

Vendor (Linux) PRIMARY

8.4 HIGH

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SUSE

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Red Hat

5.5 MEDIUM

qualitative

Primary rating from Vendor (Linux).

CVSS VectorVendor: Linux

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 20, 2026 - 15:59 vuln.today

CVSS changed

Jul 20, 2026 - 15:22 NVD

8.4 (HIGH)

Patch available

Jul 19, 2026 - 16:19 EUVD

CVE Published

Jul 19, 2026 - 14:04 cve.org

HIGH 8.4

CVE Published

Jul 19, 2026 - 14:04 cve.org

UNKNOWN (no severity yet)

DescriptionCVE.org

In the Linux kernel, the following vulnerability has been resolved:

bpf: Propagate error from visit_tailcall_insn

Commit e40f5a6bf88a ("bpf: correct stack liveness for tail calls") added visit_tailcall_insn() but did not check its return value.

AnalysisAI

Memory-safety corruption in the Linux kernel eBPF verifier (fixed in 6.19 / stable 7.0.10 / 7.1) arises because visit_tailcall_insn(), added by commit e40f5a6bf88a to correct stack liveness for tail calls, discards its return value so verifier errors are never propagated. An attacker able to load a crafted BPF program can cause the verifier to accept an invalid program, leading to high-impact confidentiality, integrity, and availability compromise (CVSS 8.4). This is tagged as Information Disclosure with no public exploit identified at time of analysis and a low EPSS of 0.14%.

Same technique Information Disclosure

View all

CVE-2019-2725 CRITICAL POC

9.8

CVE-2021-34523 CRITICAL POC

9.0

CVE-2013-2251 CRITICAL POC

9.8

CVE-2017-5638 CRITICAL POC

9.8

CVE-2025-24813 CRITICAL POC

9.8

CVE-2015-1701 HIGH POC

7.8

CVE-2017-0147 HIGH POC

7.5

CVE-2014-6324 HIGH POC

8.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Affected

CVE-2026-63864 vulnerability details – vuln.today

Back

Linux CVE-2026-63864

Severity by source

CVSS VectorVendor: Linux

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Same technique Information Disclosure

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code