CVE-2026-63865

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description Certain sleepable LSM (Linux Security Module) programs cannot be used with the bpf lsm task to inode() function because it is called under rcu read lock(), and the bpf lsm inet conn established() function because it is called from a softirq context. A softirq is a mechanism in the Linux kernel used to handle high-priority interrupts that cannot sleep.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.