CVE-2026-93222

CVE-2026-93222

published September 24, 2026

CVSS
—
EPSS
0%
Percentile
6.8
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

signal: avoid shared siginfo namespace rewrites

send_signal_locked() rewrites sender ids for the target namespace. Group

sends reuse the same siginfo, so one recipient can affect the next.

Copy the siginfo before changing it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00176 · 6.8th percentile
Published
2026-09-24T20:17Z
References (8)
EPSS history
Timeline
  • 26 SEP 03:27Z
    EPSS moved — → 0%
    epss
  • 24 SEP 15:21Z
    signal: avoid shared siginfo namespace rewrites
    cvelistv5