Memory corruption in Linux kernel - CVE-2026-93148

Vulnerability identifier: #VU150865

CSH Severity: Low

CVSS v4: 0 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-93148

CWE-ID: CWE-119

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to access memory beyond allocated object bounds.

The vulnerability exists due to improper bounds checking in the BPF verifier BTF struct-walking logic when validating BPF program accesses to MEM_ALLOC objects. A local user can load a BPF program that accesses beyond the static BTF type size to access memory beyond allocated object bounds.

The issue also affects struct ID matching used for kfunc and kptr type checks.

Linux kernel
Debian Linux
Ubuntu
linux (Ubuntu package)
linux-aws (Ubuntu package)
linux-gcp (Ubuntu package)
linux-oracle (Ubuntu package)
linux-ibm (Ubuntu package)
linux-hwe-7.0 (Ubuntu package)
linux-oem-7.0 (Ubuntu package)
linux (Debian package)

Install security update from vendor's repository.

linux (Ubuntu package) - update to 7.0.0-42.42
linux-aws (Ubuntu package) - update to 7.0.0-1016.17
linux-gcp (Ubuntu package) - update to 7.0.0-1016.18
linux-oracle (Ubuntu package) - update to 7.0.0-1015.16
linux-ibm (Ubuntu package) - update to 7.0.0-1017.17
linux-hwe-7.0 (Ubuntu package) - update to 7.0.0-42.42~24.04.1
linux-oem-7.0 (Ubuntu package) - update to 7.0.0-1017.17
linux (Debian package) - update to 6.12.115-2

• https://git.kernel.org/stable/c/9c9ee0324c774490ae953162aaaf4561d222bd93
• https://git.kernel.org/stable/c/e626a50d07d43421cbf7bfb5a084b33a5e276b6e

• Memory corruption in Linux kernel bpf
• Debian update for linux
• Ubuntu update for linux-oem-7.0
• Ubuntu update for linux, linux-aws, linux-gcp and more