Linux Linux Kernel Vulnerability Rated 7.8 CVSS

Last refreshed2026-10-15

Status: UPDATED | Advisory ID: CVE-2026-93148

Key Details

CVE	CVE-2026-93148
CVSS Score / Version	7.8 (High) / CVSS v3.1
Updated	2026-10-15
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is high; integrity impact is high; availability impact is high.
Affected products	Linux Kernel
Exploitation prediction (EPSS)	0.17% probability of exploitation in the next 30 days (5% percentile) -- FIRST.org's EPSS model.

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

bpf: Reject MEM_ALLOC BTF accesses past object bounds

BTF struct walks relax the struct-size check for accesses through a

trailing flexible array. That is valid for ordinary BTF type walking, but

PTR_TO_BTF_ID | MEM_ALLOC values point to objects allocated with the static

BTF type size.

When walking a MEM_ALLOC object, reject the access before applying the

flexible-array relaxation if the access range extends past the struct size.

Apply the same policy to struct ID matching so kfunc and kptr type checks

do not walk past the allocated object bounds either. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-93148
CVE	https://www.cve.org/CVERecord?id=CVE-2026-93148

Source

Reference

NVD

CVE