CVE-2026-93222: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.

Affected products

• Linux Linux: from 5.1.20, before 5.2 (fixed in 5.2); from 5.2.3, before 5.3 (fixed in 5.3); from 5.3, before 5.10.270 (fixed in 5.10.270); from 5.11, before 5.15.221 (fixed in 5.15.221); from 5.16, before 6.1.188 (fixed in 6.1.188); from 6.2, before 6.6.157 (fixed in 6.6.157); …

Published 2026-09-24. Last modified 2026-09-24.