CVE-2026-63865 (CVSS 8.8)

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs.

Is your site exposed to CVE-2026-63865?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

8.8

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS — Exploit Prediction

0.0012

Probability of exploitation

0.02%

Percentile rank

EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.

References

Other References

https://git.kernel.org/stable/c/0d918263c9bfc86078edb2e2f7302a0c6ce42b7c https://git.kernel.org/stable/c/26b380a3ca0b605fd8860995ed6a208f276dd316 https://git.kernel.org/stable/c/281f2a214565a5cbf8b7355a65738d80bd19b8c5 https://git.kernel.org/stable/c/452a927cddcd67478d030e646f41cb904a93156f https://git.kernel.org/stable/c/989f1b93907de1753a814996222da375f07e579b https://git.kernel.org/stable/c/beaf0e96b1da74549a6cabd040f9667d83b2e97e https://git.kernel.org/stable/c/f0fc2a9828171205244a28013f02889f50b71c9f

Frequently Asked Questions

What is CVE-2026-63865? +

In the Linux kernel, the following vulnerability has been resolved: bpf: Drop task_to_inode and inet_conn_established from lsm sleepable hooks bpf_lsm_task_to_inode() is called under rcu_read_lock() and bpf_lsm_inet_conn_established() is called from softirq context, so neither hook can be used by sleepable LSM programs. It has a CVSS v3.1 base score of 8.8 (HIGH).

How severe is CVE-2026-63865? +

CVE-2026-63865 has a CVSS v3.1 score of 8.8 out of 10, rated HIGH. This is a high-severity vulnerability that should be prioritized for patching. The EPSS score is 0.0012, placing it in the 0th percentile for exploitation probability.

How do I check if I'm vulnerable to CVE-2026-63865? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

CVE-2026-63865