GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2026-63829 (GCVE-0-2026-63829)

Vulnerability from cvelistv5 – Published: 2026-07-19 12:02 – Updated: 2026-08-17 04:51
VLAI
Title
net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink
Summary
In the Linux kernel, the following vulnerability has been resolved: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink A tunnel changelink() operates on at most two netns, dev_net(dev) and the tunnel link netns t->net. They differ once the device is created in or moved to a netns other than the one the request runs in. The rtnl changelink path checks CAP_NET_ADMIN only against dev_net(dev), so a caller privileged there but not in t->net can rewrite a tunnel that lives in t->net. Add rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in net/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is skipped when the link netns is dev_net(dev), where the rtnl path already checked it. The other patches in this series use the same helper. Gate ipgre_changelink() and erspan_changelink() with it, at the top of the op before any attribute is parsed, because the parsers update live tunnel fields first. ipgre_netlink_parms() sets t->collect_md before ip_tunnel_changelink() runs. Commit 8b484efd5cb4 ("ip6: vti: Use ip6_tnl.net in vti6_siocdevprivate().") added the same check on the ioctl path. This adds it on RTM_NEWLINK.
Severity
8.8 (High)
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: b57708add31494175be741ed3fd24023b50c3423 , < 19275943d8fe903eb7b9aa53e380e41efd042ada (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 866b0f5ae599490bd496fd84581c68ac8b94e6af (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 92b766fc55156e0da2ecd0c2302c971118f8a229 (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < e54c05ed3d9c28733fb9e5837219aca3691defa3 (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 9831bc9ecb402957810c2045c663fbfe9b09e296 (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 1697957eb0971d420dde42862b88eb43506a1105 (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 47b5d3d506609b08b2e1f7c14f0b681a1953d572 (git)
Affected: b57708add31494175be741ed3fd24023b50c3423 , < 8165f7ff57d9667d2bb477ef6af83ede7fed4ad7 (git)
guessed Create a notification for this product.
Linux Linux Affected: 3.16
Unaffected: 0 , < 3.16 (semver)
Unaffected: 5.10.261 , ≤ 5.10.* (semver)
Unaffected: 5.15.212 , ≤ 5.15.* (semver)
Unaffected: 6.1.178 , ≤ 6.1.* (semver)
Unaffected: 6.6.145 , ≤ 6.6.* (semver)
Unaffected: 6.12.95 , ≤ 6.12.* (semver)
Unaffected: 6.18.38 , ≤ 6.18.* (semver)
Unaffected: 7.1.3 , ≤ 7.1.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "include/net/rtnetlink.h",
            "net/core/rtnetlink.c",
            "net/ipv4/ip_gre.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "19275943d8fe903eb7b9aa53e380e41efd042ada",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "866b0f5ae599490bd496fd84581c68ac8b94e6af",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "92b766fc55156e0da2ecd0c2302c971118f8a229",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "e54c05ed3d9c28733fb9e5837219aca3691defa3",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "9831bc9ecb402957810c2045c663fbfe9b09e296",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "1697957eb0971d420dde42862b88eb43506a1105",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "47b5d3d506609b08b2e1f7c14f0b681a1953d572",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            },
            {
              "lessThan": "8165f7ff57d9667d2bb477ef6af83ede7fed4ad7",
              "status": "affected",
              "version": "b57708add31494175be741ed3fd24023b50c3423",
              "versionType": "git"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "include/net/rtnetlink.h",
            "net/core/rtnetlink.c",
            "net/ipv4/ip_gre.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "3.16"
            },
            {
              "lessThan": "3.16",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.10.*",
              "status": "unaffected",
              "version": "5.10.261",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "5.15.*",
              "status": "unaffected",
              "version": "5.15.212",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.1.*",
              "status": "unaffected",
              "version": "6.1.178",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.6.*",
              "status": "unaffected",
              "version": "6.6.145",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.95",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.38",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "7.1.*",
              "status": "unaffected",
              "version": "7.1.3",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.10.261",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "5.15.212",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.1.178",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.6.145",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.95",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.38",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.1.3",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "3.16",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink\n\nA tunnel changelink() operates on at most two netns, dev_net(dev) and\nthe tunnel link netns t-\u003enet. They differ once the device is created in\nor moved to a netns other than the one the request runs in. The rtnl\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\nlives in t-\u003enet.\n\nAdd rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in\nnet/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is\nskipped when the link netns is dev_net(dev), where the rtnl path already\nchecked it. The other patches in this series use the same helper.\n\nGate ipgre_changelink() and erspan_changelink() with it, at the top of\nthe op before any attribute is parsed, because the parsers update live\ntunnel fields first. ipgre_netlink_parms() sets t-\u003ecollect_md before\nip_tunnel_changelink() runs.\n\nCommit 8b484efd5cb4 (\"ip6: vti: Use ip6_tnl.net in\nvti6_siocdevprivate().\") added the same check on the ioctl path. This\nadds it on RTM_NEWLINK."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "baseScore": 8.8,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "scenarios": [
            {
              "lang": "en",
              "value": "AV:L - Exploitation requires sending RTM_NEWLINK changelink requests over rtnetlink (netlink socket), matching the kernel guidance that tc/netlink configuration paths are Local.\nAC:L - Once a cross-namespace GRE/ERSPAN device is present in the caller\u0027s netns, triggering the bug is a single deterministic netlink changelink with no races or attacker-uncontrollable timing.\nPR:L - The rtnl entry path requires CAP_NET_ADMIN in dev_net(dev), which an unprivileged user can obtain inside a user namespace via unshare --user --map-root-user --net without real init-namespace root.\nUI:N - Exploitation is fully programmatic through netlink; no victim user action such as opening a file or mounting a filesystem is required.\nS:C - The changelink mutates tunnel state in t-\u003enet while authorization is checked only against dev_net(dev), crossing from the attacker\u0027s net/user namespace into another tenant\u0027s or the host\u0027s network namespace tunnel tables.\nC:H - An attacker can rewrite IFLA_GRE_REMOTE/LOCAL, keys, and related tunnel parameters to redirect GRE/ERSPAN traffic through attacker-controlled endpoints and read tunneled payloads.\nI:H - Unauthorized changelink updates live tunnel fields (including collect_md and encap parameters parsed before the missing check), enabling arbitrary redirection or injection of traffic in the victim link netns.\nA:H - Rewriting tunnel endpoints, keys, or metadata handling can break production GRE/ERSPAN overlays and VPN paths, causing sustained loss of connectivity for dependent services."
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-08-17T04:51:37.933Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/19275943d8fe903eb7b9aa53e380e41efd042ada"
        },
        {
          "url": "https://git.kernel.org/stable/c/866b0f5ae599490bd496fd84581c68ac8b94e6af"
        },
        {
          "url": "https://git.kernel.org/stable/c/92b766fc55156e0da2ecd0c2302c971118f8a229"
        },
        {
          "url": "https://git.kernel.org/stable/c/e54c05ed3d9c28733fb9e5837219aca3691defa3"
        },
        {
          "url": "https://git.kernel.org/stable/c/9831bc9ecb402957810c2045c663fbfe9b09e296"
        },
        {
          "url": "https://git.kernel.org/stable/c/1697957eb0971d420dde42862b88eb43506a1105"
        },
        {
          "url": "https://git.kernel.org/stable/c/47b5d3d506609b08b2e1f7c14f0b681a1953d572"
        },
        {
          "url": "https://git.kernel.org/stable/c/8165f7ff57d9667d2bb477ef6af83ede7fed4ad7"
        }
      ],
      "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-63829",
    "datePublished": "2026-07-19T12:02:23.191Z",
    "dateReserved": "2026-07-19T07:54:57.014Z",
    "dateUpdated": "2026-08-17T04:51:37.933Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-63829",
      "date": "2026-09-16",
      "epss": "0.00127",
      "percentile": "0.02757"
    },
    "microsoft_vex": {
      "current_release_date": "2026-08-12T23:43:53.000Z",
      "cve": "CVE-2026-63829",
      "id": "msrc_CVE-2026-63829",
      "initial_release_date": "2026-07-20T01:04:12.000Z",
      "product_status:fixed": "1",
      "product_status:known_affected": "1",
      "source": "Microsoft CSAF VEX",
      "status": "final",
      "title": "net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-63829.json",
      "version": "3"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2026-63829\",\"sourceIdentifier\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"published\":\"2026-07-19T12:16:56.230\",\"lastModified\":\"2026-08-17T05:17:20.643\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"In the Linux kernel, the following vulnerability has been resolved:\\n\\nnet: ip_gre: require CAP_NET_ADMIN in the device netns for changelink\\n\\nA tunnel changelink() operates on at most two netns, dev_net(dev) and\\nthe tunnel link netns t-\u003enet. They differ once the device is created in\\nor moved to a netns other than the one the request runs in. The rtnl\\nchangelink path checks CAP_NET_ADMIN only against dev_net(dev), so a\\ncaller privileged there but not in t-\u003enet can rewrite a tunnel that\\nlives in t-\u003enet.\\n\\nAdd rtnl_dev_link_net_capable() next to rtnl_get_net_ns_capable() in\\nnet/core/rtnetlink.c. It requires CAP_NET_ADMIN in the link netns and is\\nskipped when the link netns is dev_net(dev), where the rtnl path already\\nchecked it. The other patches in this series use the same helper.\\n\\nGate ipgre_changelink() and erspan_changelink() with it, at the top of\\nthe op before any attribute is parsed, because the parsers update live\\ntunnel fields first. ipgre_netlink_parms() sets t-\u003ecollect_md before\\nip_tunnel_changelink() runs.\\n\\nCommit 8b484efd5cb4 (\\\"ip6: vti: Use ip6_tnl.net in\\nvti6_siocdevprivate().\\\") added the same check on the ioctl path. This\\nadds it on RTM_NEWLINK.\"}],\"affected\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"affectedData\":[{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"unaffected\",\"programFiles\":[\"include/net/rtnetlink.h\",\"net/core/rtnetlink.c\",\"net/ipv4/ip_gre.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"19275943d8fe903eb7b9aa53e380e41efd042ada\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"866b0f5ae599490bd496fd84581c68ac8b94e6af\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"92b766fc55156e0da2ecd0c2302c971118f8a229\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"e54c05ed3d9c28733fb9e5837219aca3691defa3\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"9831bc9ecb402957810c2045c663fbfe9b09e296\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"1697957eb0971d420dde42862b88eb43506a1105\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"47b5d3d506609b08b2e1f7c14f0b681a1953d572\",\"versionType\":\"git\",\"status\":\"affected\"},{\"version\":\"b57708add31494175be741ed3fd24023b50c3423\",\"lessThan\":\"8165f7ff57d9667d2bb477ef6af83ede7fed4ad7\",\"versionType\":\"git\",\"status\":\"affected\"}]},{\"vendor\":\"Linux\",\"product\":\"Linux\",\"defaultStatus\":\"affected\",\"programFiles\":[\"include/net/rtnetlink.h\",\"net/core/rtnetlink.c\",\"net/ipv4/ip_gre.c\"],\"repo\":\"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\"versions\":[{\"version\":\"3.16\",\"status\":\"affected\"},{\"version\":\"0\",\"lessThan\":\"3.16\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.10.261\",\"lessThanOrEqual\":\"5.10.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"5.15.212\",\"lessThanOrEqual\":\"5.15.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.1.178\",\"lessThanOrEqual\":\"6.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.6.145\",\"lessThanOrEqual\":\"6.6.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.12.95\",\"lessThanOrEqual\":\"6.12.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"6.18.38\",\"lessThanOrEqual\":\"6.18.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.1.3\",\"lessThanOrEqual\":\"7.1.*\",\"versionType\":\"semver\",\"status\":\"unaffected\"},{\"version\":\"7.2\",\"lessThanOrEqual\":\"*\",\"versionType\":\"original_commit_for_fix\",\"status\":\"unaffected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H\",\"baseScore\":8.8,\"baseSeverity\":\"HIGH\",\"attackVector\":\"LOCAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"LOW\",\"userInteraction\":\"NONE\",\"scope\":\"CHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.0,\"impactScore\":6.0}]},\"references\":[{\"url\":\"https://git.kernel.org/stable/c/1697957eb0971d420dde42862b88eb43506a1105\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/19275943d8fe903eb7b9aa53e380e41efd042ada\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/47b5d3d506609b08b2e1f7c14f0b681a1953d572\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/8165f7ff57d9667d2bb477ef6af83ede7fed4ad7\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/866b0f5ae599490bd496fd84581c68ac8b94e6af\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/92b766fc55156e0da2ecd0c2302c971118f8a229\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/9831bc9ecb402957810c2045c663fbfe9b09e296\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"},{\"url\":\"https://git.kernel.org/stable/c/e54c05ed3d9c28733fb9e5837219aca3691defa3\",\"source\":\"416baaa9-dc9f-4396-8d5f-8c081fb06d67\"}]}}",
    "redhat_vex": {
      "aggregate_severity": "Important",
      "current_release_date": "2026-08-27T15:57:37+00:00",
      "cve": "CVE-2026-63829",
      "id": "CVE-2026-63829",
      "initial_release_date": "2026-07-19T00:00:00+00:00",
      "product_status:known_affected": "260",
      "product_status:known_not_affected": "14",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "kernel: net: ip_gre: require CAP_NET_ADMIN in the device netns for changelink",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-63829.json",
      "version": "3"
    },
    "suse_vex": {
      "aggregate_severity": "important",
      "current_release_date": "2026-09-11T01:05:52Z",
      "cve": "CVE-2026-63829",
      "id": "CVE-2026-63829",
      "initial_release_date": "2026-07-19T17:34:35Z",
      "product_status:first_fixed": "2",
      "product_status:known_affected": "520",
      "product_status:known_not_affected": "4",
      "product_status:recommended": "469",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-63829",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-63829.json",
      "version": "21"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.