Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-63865

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:cdf91cf8c67025243e3666073db2b6a0e92b8b4ab0fc5942419250a163d8cbc9
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/bpf_lsm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"452a927cddcd67478d030e646f41cb904a93156f","status":"affected","version":"423f16108c9d832bd96059d5c882c8ef6d76eb96","versionType":"git"},{"lessThan":"f0fc2a9828171205244a28013f02889f50b71c9f","status":"affected","version":"423f16108c9d832bd96059d5c882c8ef6d76eb96","versionType":"git"},{"lessThan":"26b380a3ca0b605fd8860995ed6a208f276dd316","status":"affected","version":"423f16108c9d832bd96059d5c…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/affected/0

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/bpf_lsm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessThanOr…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/affected/1

Affected products and versions

2 source assertions
{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/bpf/bpf_lsm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"452a927cddcd67478d030e646f41cb904a93156f","status":"affected","version":"423f16108c9d832bd96059d5c882c8ef6d76eb96","versionType":"git"},{"lessThan":"f0fc2a9828171205244a28013f02889f50b71c9f","status":"affected","version":"423f16108c9d832bd96059d5c882c8ef6d76eb96","versionType":"git"},{"lessThan":"26b380a3ca0b605fd8860995ed6a208f276dd316","status":"affected","version":"423f16108c9d832bd96059d5c…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/affected/0
{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/bpf/bpf_lsm.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.11"},{"lessThan":"5.11","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.209","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.175","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.141","versionType":"semver"},{"lessThanOr…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/affected/1

Provider-owned CVSS observations

1 source assertion
{"metric":{"baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","version":"3.1"},"metric_type":"cvssV3_1"}
  • cve_program_cvelist_v5cvss
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/metrics/0/cvssV3_1

Source references

7 source assertions
{"url":"https://git.kernel.org/stable/c/0d918263c9bfc86078edb2e2f7302a0c6ce42b7c"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/26b380a3ca0b605fd8860995ed6a208f276dd316"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/2
{"url":"https://git.kernel.org/stable/c/281f2a214565a5cbf8b7355a65738d80bd19b8c5"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/452a927cddcd67478d030e646f41cb904a93156f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/989f1b93907de1753a814996222da375f07e579b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/f0fc2a9828171205244a28013f02889f50b71c9f"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:d8133e84dfb20ac4318749f71f516f7f27eaf9154770d1815b9f44518b42d5bc · sha256:5c471e3a53d93e71… · /containers/cna/references/1

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer