Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-63824

KEYS: fix overflow in keyctl_pkey_params_get_2()

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: KEYS: fix overflow in keyctl_pkey_params_get_2() The length for the internal output buffer is calculated incorrectly, which can result overflow when a too small buffer is provided. Fix the bug by allocating internal output with the size of the maximum length of the cryptographic primitive instead of caller provided size.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < 622ec2dcd59f21623f2a7ab773c80ceb7d555e3aaffected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < b1e247338bc71826a2d2def3e0874c34749df69aaffected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < 0f3058d7d26f81df9b68a18ddbe164bdc3c5eff3affected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < 5966e4e2ba213ab7ad559166152eb4f1f170dd2caffected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < 5165f1cc727f1322456735df212d8e26ec237a8daffected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < b11c1fa32667692a2c0566e10163758e786e430caffected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < 670fc6a311ed321522b7fff92cf0fc376b4f6e78affected
  • 00d60fd3b93219ea854220f0fd264b86398cbc53 to < cb481e59ea6cae3b7796ac1d7a22b6b24c3f3c0baffected

Linux Linux

Default version status: affected

  • 4.20affected
  • 0 to < 4.20unaffected
  • 5.10.260 to ≤ 5.10.*unaffected
  • 5.15.211 to ≤ 5.15.*unaffected
  • 6.1.177 to ≤ 6.1.*unaffected
  • 6.6.144 to ≤ 6.6.*unaffected
  • 6.12.95 to ≤ 6.12.*unaffected
  • 6.18.38 to ≤ 6.18.*unaffected
  • 7.1.3 to ≤ 7.1.*unaffected
  • 7.2 to ≤ *unaffected

References