CVE-2026-93111

High

Description

In the Linux kernel, the following vulnerability has been resolved: bpf: Mark tracing_multi trampolines as ftrace managed Since tracing_multi link does not set ftrace_managed, it would fail to release the tracing_multi link when attaching tracing_multi link and then attaching fentry link. [ 3.714215] WARNING: kernel/bpf/trampoline.c:1727 at bpf_trampoline_multi_detach+0x20b/0x240, CPU#1: test_progs/97 ... [ 3.733170] bpf_tracing_multi_link_release+0x14/0x30 [ 3.733890] bpf_link_free+0x58/0x130 [ 3.734414] bpf_link_release+0x23/0x30 Fix it by setting 'ftrace_managed = true' in register_fentry_multi().

SeverityHigh
CVSS7.8
Exploit probability—
ProductLinux
PublishedSep 17, 2026
First seenSep 17, 2026

How to fix

Update
  • Linux Linux280145253fd38fa975cc04963ddaf74c7f415011, 30bdd6d1384d894931f113eb595636092d8e650c or later

Affected products

ProductAffected versionsFixed in
Linux Linuxaef4dfa790b22d8052cfb78044eadbe03c876c39 ≤ v < 280145253fd38fa975cc04963ddaf74c7f415011, aef4dfa790b22d8052cfb78044eadbe03c876c39 ≤ v < 30bdd6d1384d894931f113eb595636092d8e650c, 7.2280145253fd38fa975cc04963ddaf74c7f415011, 30bdd6d1384d894931f113eb595636092d8e650c

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.

CVE-2026-93111 · Linux · Dark Radar