Skip to main content
VulnerabilityPublished Updated

CVE-2026-93253: Linux kernel · sched/isolation: Defer freeing of cpumask memblock memory to initcall

Affects Linux kernelSource CVE Database V5

0

Not known to be exploited : upgrade to 811fdac2d1bdf0b0d3fda262aac288ddd13a1422 or 2b58c749b8c5244e259a0230bc57b10b010dc545 when convenient.

Data as of 26 Oct 2026, 17:16 UTC

Severity
Low

Rated Low by Threat Radar's AI analysis · CVSS not yet scored by NVD

EPSS
0.1% chance of exploitation in 30 days – higher than 8% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Patch
Available – fixed in 811fdac2d1bdf0b0d3fda262aac288ddd13a1422, 2b58c749b8c5244e259a0230bc57b10b010dc545

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 24 Sep 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade Linux kernel to 811fdac2d1bdf0b0d3fda262aac288ddd13a1422 or 2b58c749b8c5244e259a0230bc57b10b010dc545.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ 27c3a5967f054ab666704cb28f2aeb18ca07cab7, < 811fdac2d1bdf0b0d3fda262aac288ddd13a1422
Fixed in
  • 811fdac2d1bdf0b0d3fda262aac288ddd13a1422
LinuxLinuxAffected
  • ≥ 27c3a5967f054ab666704cb28f2aeb18ca07cab7, < 2b58c749b8c5244e259a0230bc57b10b010dc545
Fixed in
  • 2b58c749b8c5244e259a0230bc57b10b010dc545
LinuxLinuxAffected
  • =7.0
Fixed in–

AI-suggested

A fix is available in Linux kernel versions identified by commits 811fdac2d1bdf0b0d3fda262aac288ddd13a1422 and 2b58c749b8c5244e259a0230bc57b10b010dc545. Users should update to these fixed versions to remediate the issue.

Description

CVE-2026-93253 is a Linux kernel vulnerability involving premature freeing of cpumask memblock memory during early boot. The issue occurs when the memory map is not fully initialized, causing warnings and potential instability. The fix defers freeing this memory to a later initcall stage, preventing improper memory release during boot.

References

Community reviews

Loading reviews…