CVE-2026-93270: Linux kernel · bpf: Disallow interpreter fallback for BPF_ADDR_PERCPU insn
Affects Linux kernelSource CVE Database V5
Not known to be exploited : upgrade to 57cf929a33cb76be3f24886073ae820b4c496914 or 7a0855e73757ee9cf25ba635a1c735018ecba742 when convenient.
Data as of 26 Oct 2026, 14:05 UTC
Rated Medium by Threat Radar's AI analysis · CVSS not yet scored by NVD
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 7% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
- Patch
- Available – fixed in 57cf929a33cb76be3f24886073ae820b4c496914, 7a0855e73757ee9cf25ba635a1c735018ecba742
Exploitation evidence
Disclosed: evidence found.
CVE published 24 Sep 2026
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Upgrade Linux kernel to 57cf929a33cb76be3f24886073ae820b4c496914 or 7a0855e73757ee9cf25ba635a1c735018ecba742.
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in
|
| LinuxLinux | Affected
| Fixed in– |
AI-suggested
A fix has been implemented and committed in the Linux kernel source (commits 57cf929 and 7a0855e). Users should update to the fixed kernel versions or apply the relevant patches to prevent interpreter fallback for BPF_ADDR_PERCPU instructions. No additional mitigation is indicated.
Description
A vulnerability in the Linux kernel related to BPF (Berkeley Packet Filter) instructions was fixed by disallowing interpreter fallback for BPF_ADDR_PERCPU instructions. The interpreter previously ignored an offset in the BPF_MOV64_PERCPU_REG instruction, causing a page fault when loading memory from the register. This issue was addressed by requiring JIT compilation for these instructions to prevent interpreter fallback and avoid kernel faults.