CVE-2026-93138

A flaw was found in the Linux kernel. Specifically, a race condition exists within the Berkeley Packet Filter (BPF) subsystem when preparing vmlinux BPF Type Format (BTF) data. This issue occurs because the system can publish a pointer to the BTF data before its contents are fully visible, allowing other processes to access incomplete or inconsistent information. Such inconsistent data access could lead to system instability or unexpected behavior.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because triggering the condition requires local privileges to load BPF programs and the race window is restricted to concurrent initial BPF operations, predominantly on weakly ordered processor architectures. Standard Red Hat deployments disable unprivileged BPF by default, restricting access to administrative or privileged processes. Consequently, an attacker cannot exploit this flaw from an unprivileged user session, limiting the primary risk to local denial of service through kernel instability.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.