CVE-2026-93112

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF subsystem where the bpf cpumask populate() function uses bitmap copy() to write to a destination typed as struct cpumask *. This allows the verifier to incorrectly accept borrowed cpumask pointers returned by read-only kfuncs, such as scx bpf get online cpumask(), as writable destinations.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.