CVE-2026-63865

A flaw was found in the Linux kernel. The Berkeley Packet Filter (BPF) Linux Security Modules (LSM) feature incorrectly registered certain hooks, task_to_inode and inet_conn_established, as available for sleepable programs. These hooks are invoked in critical system contexts where program sleeping is not allowed. An attacker could potentially exploit this by loading a malicious BPF LSM program, leading to system instability or a kernel crash.

This vulnerability is rated as Moderate severity because exploitation is restricted to local privileged accounts capable of loading BPF programs and only results in a denial of service. In typical Red Hat Enterprise Linux environments, loading eBPF security module extensions requires elevated capabilities such as CAP_SYS_ADMIN or CAP_BPF, preventing unprivileged local users from triggering the issue. Furthermore, supported Red Hat Enterprise Linux releases do not include the vulnerable code configuration.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.