CVE-2026-93044
Last modified
CVE-2026-93044 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-related insns Since the interpreter does not support the arena-related insns, interpreter fallback should not be allowed for these insns in core.c::__bpf_prog_select_runtime(). Currently, when the interpreter executes the arena ST/LDX/STX insns, it would hit the BUG_ON() in ___bpf_prog_run() at run time. [ 2.579196] BPF interpreter: unknown opcode a2 (imm: 0x0) [ 2.579998] ------------[ cut here ]------------ [ 2.580652] kernel BUG at kernel/bpf/core.c:2349! [ 2.581314] Oops: invalid opcode: 0000 [#1] SMP PTI Set jit_required as true when arena map is used in the prog to disallow interpreter fallback for arena-related insns..
Description
In the Linux kernel, the following vulnerability has been resolved: bpf: Disallow interpreter fallback for arena-related insns Since the interpreter does not support the arena-related insns, interpreter fallback should not be allowed for these insns in core.c::__bpf_prog_select_runtime(). Currently, when the interpreter executes the arena ST/LDX/STX insns, it would hit the BUG_ON() in ___bpf_prog_run() at run time. [ 2.579196] BPF interpreter: unknown opcode a2 (imm: 0x0) [ 2.579998] ------------[ cut here ]------------ [ 2.580652] kernel BUG at kernel/bpf/core.c:2349! [ 2.581314] Oops: invalid opcode: 0000 [#1] SMP PTI Set jit_required as true when arena map is used in the prog to disallow interpreter fallback for arena-related insns.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| Linux | Linux | >= 6082b6c328b5486da2b356eae94b8b83c98b5565, < 408b6d3bc19c4aa852ab7ee2f447756e52e69967; >= 6082b6c328b5486da2b356eae94b8b83c98b5565, < 34746b5a84ec37c0ea2bf6808c65c5ed8790eb51 |
| Linux | Linux | 6.9 |
References
Timeline
- Published
- Last Modified
- Status
- Received
Frequently Asked Questions
What is CVE-2026-93044?
How severe is CVE-2026-93044?
How do I fix CVE-2026-93044?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-93039In the Linux kernel, the following vulnerability has been re…7.4
- CVE-2026-9304A security flaw has been discovered in calcom cal.diy up to …5
- CVE-2026-93040In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93041In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93042In the Linux kernel, the following vulnerability has been re…8.8
- CVE-2026-93043In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93045In the Linux kernel, the following vulnerability has been re…7.8
- CVE-2026-93046In the Linux kernel, the following vulnerability has been re…7
- CVE-2026-93047In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93048In the Linux kernel, the following vulnerability has been re…
- CVE-2026-93049In the Linux kernel, the following vulnerability has been re…
- CVE-2026-9305A weakness has been identified in QuantumNous new-api up to …6.3
Are you affected by CVE-2026-93044?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
