CVE-2026-93173

A flaw was found in the Linux kernel's Berkeley Packet Filter (BPF) and Linux Security Module (LSM) subsystems. This vulnerability occurs when a sleepable LSM program is incorrectly handled during the freeing of non-sleepable BPF programs. An attacker could potentially trigger a system crash, leading to a Denial of Service (DoS).

This vulnerability is rated as having a Low impact because exploiting it requires attaching a sleepable security module program to kernel hooks, which requires high administrative capabilities (such as CAP_SYS_ADMIN or CAP_BPF). On standard Red Hat Enterprise Linux deployments, unprivileged users cannot load or attach these probes, preventing unauthorized denial-of-service attacks. Consequently, the flaw poses minimal risk to environments operating with standard privilege separation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.