Details
- Type
- Out-of-Bounds Access
- Impact
- Denial Of Service, Privilege Escalation
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Published
- 17 September 2026
- Updated
- 15 October 2026
CVE-2026-93127 Linux Kernel - Out-of-Bounds Access
Linux kernel contains a vulnerability in BPF sign-extending narrowing stack fills caused by improper handling of scalar id during sign extension, letting attackers cause out-of-bounds access, exploit requires crafted BPF programs.
CVSS base score
7.8
/10
High- CISA KEV
- Not listed
- Public exploit
- None known
- Authentication
- Required
- EPSS
- 0.17% chance of exploitation in 30 days