CVE-2026-63865
Published Jul 19, 2026
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.
Is your site exposed to CVE-2026-63865?
Run a free security scan — no signup, results in seconds.
References
Other References
https://git.kernel.org/stable/c/0d918263c9bfc86078edb2e2f7302a0c6ce42b7c
https://git.kernel.org/stable/c/26b380a3ca0b605fd8860995ed6a208f276dd316
https://git.kernel.org/stable/c/281f2a214565a5cbf8b7355a65738d80bd19b8c5
https://git.kernel.org/stable/c/452a927cddcd67478d030e646f41cb904a93156f
https://git.kernel.org/stable/c/989f1b93907de1753a814996222da375f07e579b
https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e
https://git.kernel.org/stable/c/f0fc2a9828171205244a28013f02889f50b71c9f
Frequently Asked Questions
What is CVE-2026-63865? +
In the Linux kernel, the following vulnerability has been resolved:
bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
bpf_lsm_task_to_inode() is called under rcu_read_lock() and
bpf_lsm_inet_conn_established() is called from softirq context, so
neither hook can be used by sleepable LSM programs.
How do I check if I'm vulnerable to CVE-2026-63865? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.