CVE-2026-93043

CVE-2026-93043

published September 17, 2026

CVSS
—
EPSS
0%
Percentile
9.0
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

bpf: Disallow interpreter fallback for gotox insn

The interpreter does not recognize the BPF_JMP|BPF_JA|BPF_X insn, which

is used for insn_array map. Thereafter, it would hit the BUG_ON() in

___bpf_prog_run() at run time.

[ 2.563726] BPF interpreter: unknown opcode 0d (imm: 0x0)

[ 2.564557] ------------[ cut here ]------------

[ 2.565206] kernel BUG at kernel/bpf/core.c:2349!

[ 2.565882] Oops: invalid opcode: 0000 [#1] SMP PTI

Set jit_required as true when insn_array map is used in the prog in

order to disallow interpreter fallback for gotox insn in

core.c::__bpf_prog_select_runtime().

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00198 · 9.0th percentile
Published
2026-09-17T21:17Z
References (2)
EPSS history
Timeline
  • 19 SEP 03:55Z
    EPSS moved — → 0%
    epss
  • 17 SEP 16:10Z
    bpf: Disallow interpreter fallback for gotox insn
    cvelistv5