BPF Instruction Handling Issue in Linux Kernel by Linux Foundation

CVE-2026-93270

What is CVE-2026-93270?

The Linux Kernel contains a vulnerability associated with the handling of BPF (Berkeley Packet Filter) instructions. Specifically, when executing the BPF_MOV64_PERCPU_REG instruction, the interpreter erroneously ignores a base offset, leading to incorrect memory access. This oversight can cause the system to experience a page fault, compromising user operations and potentially affecting system stability.

References