SB2026091875 - Memory corruption in Linux kernel bpf

Description

This security bulletin contains information about 1 vulnerability.

1) Memory corruption (CVE-ID: CVE-2026-93148)

CWE-ID: CWE-119 - Memory corruption

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to access memory beyond allocated object bounds.

The vulnerability exists due to improper bounds checking in the BPF verifier BTF struct-walking logic when validating BPF program accesses to MEM_ALLOC objects. A local user can load a BPF program that accesses beyond the static BTF type size to access memory beyond allocated object bounds.

The issue also affects struct ID matching used for kfunc and kptr type checks.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/9c9ee0324c774490ae953162aaaf4561d222bd93
• https://git.kernel.org/stable/c/e626a50d07d43421cbf7bfb5a084b33a5e276b6e