CVE-2026-63865
- Source
- https://cve.org/CVERecord?id=CVE-2026-63865
- Import Source
- https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-63865.json
- JSON Data
- https://api.test.osv.dev/v1/vulns/CVE-2026-63865
- Downstream
- Published
- 2026-07-19T14:04:51.215Z
- Modified
- 2026-07-22T03:31:56.947892673Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
- Summary
- bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
bpf: Drop tasktoinode and inetconnestablished from lsm sleepable hooks
bpflsmtasktoinode() is called under rcureadlock() and bpflsminetconnestablished() is called from softirq context, so neither hook can be used by sleepable LSM programs.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63865.json" }- References
-
- https://git.kernel.org/stable/c/0d918263c9bfc86078edb2e2f7302a0c6ce42b7c
- https://git.kernel.org/stable/c/26b380a3ca0b605fd8860995ed6a208f276dd316
- https://git.kernel.org/stable/c/281f2a214565a5cbf8b7355a65738d80bd19b8c5
- https://git.kernel.org/stable/c/452a927cddcd67478d030e646f41cb904a93156f
- https://git.kernel.org/stable/c/989f1b93907de1753a814996222da375f07e579b
- https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e
- https://git.kernel.org/stable/c/f0fc2a9828171205244a28013f02889f50b71c9f
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/63xxx/CVE-2026-63865.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-63865
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced423f16108c9d832bd96059d5c882c8ef6d76eb96Fixed452a927cddcd67478d030e646f41cb904a93156fFixedf0fc2a9828171205244a28013f02889f50b71c9fFixed26b380a3ca0b605fd8860995ed6a208f276dd316Fixed0d918263c9bfc86078edb2e2f7302a0c6ce42b7cFixed281f2a214565a5cbf8b7355a65738d80bd19b8c5Fixed989f1b93907de1753a814996222da375f07e579bFixedbeaf0e96b1da74549a6cabd040f9667d83b2e97e
Linux / Kernel
Package
- Name
- Kernel
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced5.11.0Fixed5.15.209
- Type
- ECOSYSTEM
- Events
-
Introduced5.16.0Fixed6.1.175
- Type
- ECOSYSTEM
- Events
-
Introduced6.2.0Fixed6.6.141
- Type
- ECOSYSTEM
- Events
-
Introduced6.7.0Fixed6.12.91
- Type
- ECOSYSTEM
- Events
-
Introduced6.13.0Fixed6.18.33
- Type
- ECOSYSTEM
- Events
-
Introduced6.19.0Fixed7.0.10