CVE-2026-93147NVD

Vulnerability Summary

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Replace ly instruction with llgf

cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when ly loads
the cpu_nr into BPF_REG_0 it does not zero the upper bits, but llgf does.

Severity Level

HIGH(7.8)

Published Date

Sep 17, 2026

Last Modified

Sep 18, 2026

Exploitation Status

No confirmed exploitation yet

EPSS Score (30-Day)

0.15%Probability

Root Weakness (CWE)

N/A

CVSS v3.1 Base Metrics — Score 7.8 (HIGH)

Attack VectorLocal

Attack ComplexityLow

Privileges RequiredLow

User InteractionNone

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

Affected & Patched Versions

Affected Versions

Linux Linux >= 9012cf2491e3c5d28d098b0d6da804af82977032 and < 88500a86ab79f01c568de6ed00f5b1c5c79f11d5
Linux Linux >= 9012cf2491e3c5d28d098b0d6da804af82977032 and < 5f6cc299938b561cb01e343bab7042611fcee12a
Linux Linux >= 7.2

Patched Versions

Linux Linux 88500a86ab79f01c568de6ed00f5b1c5c79f11d5
Linux Linux 5f6cc299938b561cb01e343bab7042611fcee12a

📧Email Delivery — Threat intel straight to your inbox.

♾️Unlimited Vendors — Track your entire stack.

🚨All New CVEs — Be the first to know.

⚙️Custom EPSS — Filter noise, focus on risk.

💬Webhooks — Slack & Teams integration.

🚫Ad-Free — Uninterrupted experience.