Back to CVE records
High 7.8Published Sep 17, 2026
CVE-2026-93147s390/bpf: Replace ly instruction with llgf
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Start free and add your stack
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: s390/bpf: Replace ly instruction with llgf cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when ly loads the cpu_nr into BPF_REG_0 it does not zero the upper bits, but llgf does.
- CVSS
- 7.8 HIGH (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Sep 18, 2026
- First seen by InfoSec Signals
- Oct 9, 2026
Affected products
Linux Linux linux:linux (from the name) | from 9012cf2491e3c5d28d098b0d6da804af82977032 before 88500a86ab79f01c568de6ed00f5b1c5c79f11d5; 9012cf2491e3c5d28d098b0d6da804af82977032 builds before 5f6cc299938b561cb01e343bab7042611fcee12a | CNA record |
References
- https://git.kernel.org/stable/c/88500a86ab79f01c568de6ed00f5b1c5c79f11d5
- https://git.kernel.org/stable/c/5f6cc299938b561cb01e343bab7042611fcee12a
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.