CVE-2026-63865: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
In the Linux kernel, the following vulnerability has been resolved:
bpf: Drop tasktoinode and inetconnestablished from lsm sleepable hooks
bpflsmtasktoinode() is called under rcureadlock() and bpflsminetconnestablished() is called from softirq context, so neither hook can be used by sleepable LSM programs.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-63865?
CVE-2026-63865 has a severity score of 8.8, indicating it is a high-risk vulnerability.
How do I fix CVE-2026-63865?
Fixing CVE-2026-63865 involves updating to the latest version of the Linux kernel where this vulnerability has been resolved.
What type of systems are affected by CVE-2026-63865?
CVE-2026-63865 affects the Linux kernel across various Linux distributions.
What are the potential impacts of CVE-2026-63865?
Exploitation of CVE-2026-63865 may lead to privilege escalation, allowing unauthorized access to critical system resources.
Is there a workaround for CVE-2026-63865?
Currently, there are no known workarounds for CVE-2026-63865, and updating the kernel is recommended.