CVE-2026-93148

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the BPF (Berkeley Packet Filter) subsystem where BTF (BPF Type Format) struct walks relax struct-size checks for accesses through trailing flexible arrays. While this is acceptable for ordinary BTF type walking, PTR TO BTF ID and MEM ALLOC values point to objects allocated with a static BTF type size. This allows access ranges to extend past the allocated object bounds during MEM ALLOC object walking, as well as during kfunc and kptr type checks during struct ID matching.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.