CVE-2026-93045

CVE-2026-93045 affects the Linux kernel BPF arena subsystem. The vulnerability resides in bpf_arena_free_pages() , which accepts scalar arena addresses and masks them to the low 32 bits before reconstructing a full user address. When the scalar value is below the low 32 bits of the arena base, th...

CVE-2026-93045: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bpf: Reject arena frees below the arena base bpfarenafreepages accepts scalar arena addresses. The runtime masks the address to the low 32 bits and reconstructs a full user address from the arena base before returning the range t...