Memory Corruption Vulnerability in Linux Kernel Affects System Performance

CVE-2026-63809

What is CVE-2026-63809?

A vulnerability has been identified in the Linux kernel that could lead to memory corruption due to incorrect buffer management in the proc_sys_call_handler(). The handler allocates a temporary sysctl buffer using kvzalloc(), which may fallback to vmalloc() for larger requests. However, freeing this buffer with kfree() introduces potential memory corruption risks. The vulnerability was first detected during a manual inspection prompted by an experimental analysis tool. It triggers faults while writing to /proc/sys/kernel/domainname, potentially impacting system stability and security. Proper management using kvfree() is recommended to mitigate the risks and ensure safe memory handling.

References