bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.
CVE-2026-63865
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: osv:CVE-2026-63865
Kernel
Source reference: /affected/1/package/name
- Affected versions
- Not stated in this record
- Fixed versions
- 5.15.209
Source reference:
/affected/1/ranges6.1.175Source reference:
/affected/1/ranges6.6.141Source reference:
/affected/1/ranges6.12.91Source reference:
/affected/1/ranges6.18.33Source reference:
/affected/1/ranges7.0.10Source reference:
/affected/1/ranges - Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"ranges": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"type": "GIT",
"events": [
{
"introduced": "423f16108c9d832bd96059d5c882c8ef6d76eb96"
},
{
"fixed": "452a927cddcd67478d030e646f41cb904a93156f"
},
{
"fixed": "f0fc2a9828171205244a28013f02889f50b71c9f"
},
{
"fixed": "26b380a3ca0b605fd8860995ed6a208f276dd316"
},
{
"fixed": "0d918263c9bfc86078edb2e2f7302a0c6ce42b7c"
},
{
"fixed": "281f2a214565a5cbf8b7355a65738d80bd19b8c5"
},
{
"fixed": "989f1b93907de1753a814996222da375f07e579b"
},
{
"fixed": "beaf0e96b1da74549a6cabd040f9667d83b2e97e"
}
]
}
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63865.json"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.11.0"
},
{
"fixed": "5.15.209"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "5.16.0"
},
{
"fixed": "6.1.175"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.2.0"
},
{
"fixed": "6.6.141"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.7.0"
},
{
"fixed": "6.12.91"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.13.0"
},
{
"fixed": "6.18.33"
}
]
},
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "6.19.0"
},
{
"fixed": "7.0.10"
}
]
}
],
"package": {
"name": "Kernel",
"ecosystem": "Linux"
},
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-63865.json"
}
}
]- Related CVEs
- CVE-2026-63865
Source reference:
/id
Publisher severity
No explicit severity was provided.
- Event
- #50744 · Revision 1
- Added to Heist Feed
- Publisher date