CVE-2026-63870

Exploitation

Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.

SSVC decision

Not assessed by CISA

EPSS probability

0.18% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 7.1% of scored records. A rank, not a probability.

NVD base score

7.8 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD analysis status

Awaiting Analysis. NVD last modified this record on 2026-07-27.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

Published

2026-07-19 14:18Z1 MO AGO

Last updated

2026-08-05 12:36Z1 MO AGO

Reserved

2026-07-19

Assigning CNA

Linux

Record state

PUBLISHED

Severity

High (CVSS 7.8)

CNA CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses

• CWE-824Access of Uninitialized PointerBase

Data version

5.2

Document digest

274d4199bcb6ed68b77e6694b6b0c5134486bbaa13d00b3040085caa6cddf934

• git.kernel.orghttps://git.kernel.org/stable/c/af07fffbd53ddc3ec3c2a4ca914f27899fa89bca
• git.kernel.orghttps://git.kernel.org/stable/c/3150e6d3223dfc356308125cabf9c34169842d2a
• git.kernel.orghttps://git.kernel.org/stable/c/8da95cb6ad7d656c871e776a9c7b77e894d6d89c
• git.kernel.orghttps://git.kernel.org/stable/c/1a827b95e62b4cbe851ae7cc9c961cdfa769cca4
• git.kernel.orghttps://git.kernel.org/stable/c/c1819c8defa235c7beda859bc185b1c429a55ecd
• git.kernel.orghttps://git.kernel.org/stable/c/285b0842f2e01c3edf805f1fd64da11d9b7f6b4c
• git.kernel.orghttps://git.kernel.org/stable/c/87172cc8dc49aaf54407a31edffb0232f8cb93ab
• git.kernel.orghttps://git.kernel.org/stable/c/3a5f3f7aff18bcc36a57839cf50cf0cc8de707f3