Strix
74.4K

CVE-2026-93222

UnknownEPSS 0.18%

Last modified

CVE-2026-93222 is a vulnerability of currently unknown severity. In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.. EPSS estimates a 0.18% chance of exploitation in the next 30 days.

Description

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.

Metrics

EPSS Probability
0.18%

6.7th percentile

Probability of exploitation in the next 30 days. Learn more

Affected Software

Source: CNA advisory (CVE.org). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 7a0cf094944e2540758b7f957eb6846d5126f535, < e015d1ac6b43a23c52c5163299414ae77d7d4ae0; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < 4ee7c4e4719a825052f42f02ec159b5b42b68fbc; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < 148b0dae2a1755beb873a2aab51fb191414f068c; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < 6b1de022304ef85284c5933a5fb8492f6f54efc9; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < 03c8761e75d1619906bb503686f9cc1dfc6a67f4; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < a246da20c8e4ae4319511c698b9f26ad0ad1769f; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < b655c2040ce836afad5643842543567b31f8c11d; >= 7a0cf094944e2540758b7f957eb6846d5126f535, < d19cdc167e696714509e87d3f7ae765b6e164589; e897dd22800f02bd48aefb1511fff0b2ce96e94c; 2f0e9eed11ca778d0ec5507a739c28472fd4ca20; >= 5.1.20, < 5.2; >= 5.2.3, < 5.3
LinuxLinux5.3

References

Timeline

Published
Last Modified
Status
Received

Frequently Asked Questions

What is CVE-2026-93222?
In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.
How severe is CVE-2026-93222?
Severity scoring for CVE-2026-93222 is pending analysis. The EPSS model estimates a 0.18% probability of exploitation in the next 30 days.
How do I fix CVE-2026-93222?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.

How Strix Helps

Related CVEs from 2026

View all 2026CVEs →

Are you affected by CVE-2026-93222?

Run a free Strix scan to check your systems for this vulnerability.

Scan your code now

Source: NVD / NIST