CVE-2026-93045

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the bpf arena free pages() function where scalar arena addresses are processed by masking the address to the low 32 bits and reconstructing a full user address from the arena base. If the scalar value is lower than the low 32 bits of the arena base, the resulting full uaddr falls below user vm start. This causes the upper-end clipping mechanism to generate an out-of-range free-tree offset, which could allow a subsequent allocation to return an address located below the arena mapping.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.