CVE-2026-93173: Linux kernel · bpf,lsm: Drop bpf_prog_free from sleepable_lsm_hooks
Affects Linux kernelSource CVE Database V5
Not known to be exploited · fixed in d5f2f741a900123fbcb7c7c0a002b81306fbe242 : update Linux kernel when convenient.
Data as of 26 Oct 2026, 14:19 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in d5f2f741a900123fbcb7c7c0a002b81306fbe242, 2135f661fae7160a7fc603cab43cbc7999e8bfce, 915c2d9d69fc6c5f9f41d12bf4a9c51293aaee62 +1
Exploitation evidence
Disclosed: evidence found.
CVE published 17 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to d5f2f741a900123fbcb7c7c0a002b81306fbe242, 2135f661fae7160a7fc603cab43cbc7999e8bfce, 915c2d9d69fc6c5f9f41d12bf4a9c51293aaee62 or 2ce3f548cfc6a1fe4c53479cf8a21931cdfd51d8.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix has been implemented in the Linux kernel as indicated by the fixed commit versions. Users should update to the patched kernel versions to remediate this issue. No additional mitigation actions are specified or required.
Description
A vulnerability in the Linux kernel related to the handling of BPF (Berkeley Packet Filter) programs in sleepable Linux Security Modules (LSM) hooks has been resolved. The issue involves calling a sleepable function from an invalid context, which can cause kernel BUGs due to improper context handling during program freeing. The fix removes the bpf_prog_free call from sleepable LSM hooks to prevent this invalid context usage.
References
- git.kernel.org/stable/c/2135f661fae7160a7fc603cab43cbc7999e8bfce (opens in a new tab)
- git.kernel.org/stable/c/d5f2f741a900123fbcb7c7c0a002b81306fbe242 (opens in a new tab)
- git.kernel.org/stable/c/915c2d9d69fc6c5f9f41d12bf4a9c51293aaee62 (opens in a new tab)
- git.kernel.org/stable/c/2ce3f548cfc6a1fe4c53479cf8a21931cdfd51d8 (opens in a new tab)