CVE-2026-63865

Summary

In the Linux kernel, the following vulnerability has been resolved:

bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks

bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.

Affected Software

VendorProductVersion RangeStatus
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < 452a927cddcd67478d030e646f41cb904a93156faffected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < f0fc2a9828171205244a28013f02889f50b71c9faffected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < 26b380a3ca0b605fd8860995ed6a208f276dd316affected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < 0d918263c9bfc86078edb2e2f7302a0c6ce42b7caffected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < 281f2a214565a5cbf8b7355a65738d80bd19b8c5affected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < 989f1b93907de1753a814996222da375f07e579baffected
LinuxLinux423f16108c9d832bd96059d5c882c8ef6d76eb96 < beaf0e96b1da74549a6cabd040f9667d83b2e97eaffected
LinuxLinux5.11affected
LinuxLinux0 < 5.11unaffected
LinuxLinux5.15.209 <= 5.15.*unaffected
LinuxLinux6.1.175 <= 6.1.*unaffected
LinuxLinux6.6.141 <= 6.6.*unaffected
LinuxLinux6.12.91 <= 6.12.*unaffected
LinuxLinux6.18.33 <= 6.18.*unaffected
LinuxLinux7.0.10 <= 7.0.*unaffected
LinuxLinux7.1 <= *unaffected

Weaknesses

References