Vulnerability in Linux

CVE-2026-93222

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.

Published .

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

  • Linux — versions 2f0e9eed11ca778d0ec5507a739c28472fd4ca20, 5.3, e897dd22800f02bd48aefb1511fff0b2ce96e94c

References