CVE-2026-93146

A flaw was found in the Linux kernel's time namespace handling. The proc_timens_set_offset() function does not properly validate the nanosecond field (tv_nsec) when setting time offsets. This oversight allows for invalid nanosecond values to be used in time calculations, which can lead to incorrect system time or other unexpected behavior.

Red Hat has rated this vulnerability as Low severity because triggering it requires local access to configure time namespace offsets, and the impact is confined to inaccurate time values within that specific namespace rather than host compromise. In standard deployments, defining these namespace parameters requires specific local privileges or user namespace execution prior to spawning child processes. As a result, the flaw does not facilitate privilege escalation or compromise confidential host data.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.