CVE-2026-93044

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) component. This vulnerability occurs when the BPF interpreter attempts to process specific arena-related instructions that it does not support, particularly when a BPF program uses an arena map. This can lead to a kernel bug and an 'Oops' condition, resulting in a system crash and a Denial of Service (DoS) for the affected system.

BPF arena related instructions are not supported by the BPF interpreter, but an arena based program could still reach interpreter fallback and execute unsupported opcodes. This causes the interpreter to hit BUG_ON() in ___bpf_prog_run and can crash the kernel. For the CVSS the PR:L is used because triggering requires a local user or process able to load the relevant BPF program, but this does not necessarily mean full root privileges in practical deployments. The issue is not network reachable and is triggered through the local BPF control plane rather than packet traffic. Impact is denial of service only via kernel crash. No UAF, OOB access, or arbitrary write primitive is indicated by the code change, so confidentiality and integrity impact are not assigned.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.