CVE-2026-63860
high
CVSS v3
8.4
CVSS v4 NEW
—
VIR risk
8.4
Description
Linux kernel (GCP FIPS) vulnerabilities
Predictions
Exploit likelihood
80%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
No mitigations published for this CVE yet.
The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.
✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here withsource_tier=community-verified.
OS impact
Ubuntu Fixed 3 releases
| Version | Status | Fixed in |
|---|---|---|
| noble | Fixed | 6.8.0-1064.72+fips1 |
| jammy | Fixed | 5.15.0-1075.79 |
| focal | Fixed | 5.15.0-1064.66~20.04.1 |
References
- https://ubuntu.com/security/notices/USN-8576-1
- https://git.kernel.org/stable/c/137b5918931d4d05aa8ea8d3adf67f7224eef63c
- https://git.kernel.org/stable/c/5877c043398d5fa0e93919a3d837e5cd7a98a961
- https://git.kernel.org/stable/c/6ed3d14fc45d3da6025e7fe4a6a09066856698e2
- https://git.kernel.org/stable/c/87111356d58d86edb221ba144d261ed83a5b8bbe
- https://git.kernel.org/stable/c/abda65bdd13084c771842adaac1f652d0660dd82
- https://git.kernel.org/stable/c/c26a0052cceed4c4d380ee5808b699f937fb58d8
- https://git.kernel.org/stable/c/f2c7b39dde2e61df8157066969cc2a408cd3dcd9
- https://git.kernel.org/stable/c/fcd07d3b8ee7a39b344d73aed69c1a68cd9eacdf
- https://ubuntu.com/security/notices/USN-8575-1
- https://ubuntu.com/security/notices/USN-8574-1
Community-verified mitigations for this CVE will appear above when contributors publish them.
Verify integrity in audit chain (admin only). AS-IS.