CVE-2026-93112
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Require a BPF cpumask for bpf_cpumask_populate() bpf_cpumask_populate() writes to its destination with bitmap_copy(), but the destination is typed as struct cpumask *. That allows the verifier to accept borrowed cpumask pointers returned by read-only kfuncs, such as scx_bpf_get_online_cpumask(), as a writable destination. Make the destination a struct bpf_cpumask * so populate follows the same ownership rule as the other mutating cpumask kfuncs. Query kfuncs continue to accept const struct cpumask * inputs.
How to fix
- Linux Linux0cfc9348a045da64955af2dd6902e66dfc7d6469, b7e2a5c6519adc73be55c3de2cb545e095a0fbc5, 8740156ad33be5071b588b594c55f279457f667c or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 950ad93df2fce70445e655ed2e74f5c1a8653ab2 ≤ v < 0cfc9348a045da64955af2dd6902e66dfc7d6469, 950ad93df2fce70445e655ed2e74f5c1a8653ab2 ≤ v < b7e2a5c6519adc73be55c3de2cb545e095a0fbc5, 950ad93df2fce70445e655ed2e74f5c1a8653ab2 ≤ v < 8740156ad33be5071b588b594c55f279457f667c, 6.15 | 0cfc9348a045da64955af2dd6902e66dfc7d6469, b7e2a5c6519adc73be55c3de2cb545e095a0fbc5, 8740156ad33be5071b588b594c55f279457f667c |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.