CVE-2026-93135

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where the verifier skips rewriting the helper call offset insn->imm in bpf do misc fixups() for architectures that implement bpf jit inlines helper call(), such as LoongArch, ARM64, and RISC-V. This occurs because the helper is intended to be inlined by the Just-In-Time (JIT) compiler. If JIT is disabled via net.core.bpf jit enable=0 or fails due to Out-Of-Memory (OOM) conditions, the system falls back to the BPF interpreter. The interpreter then executes the unpatched raw ID, leading to a jump into an invalid address space, which results in an instruction alignment fault or a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.