CVE-2026-93222
In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.
Weakness
In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.
References
- https://git.kernel.org/stable/c/03c8761e75d1619906bb503686f9cc1dfc6a67f4
- https://git.kernel.org/stable/c/148b0dae2a1755beb873a2aab51fb191414f068c
- https://git.kernel.org/stable/c/4ee7c4e4719a825052f42f02ec159b5b42b68fbc
- https://git.kernel.org/stable/c/6b1de022304ef85284c5933a5fb8492f6f54efc9
- https://git.kernel.org/stable/c/a246da20c8e4ae4319511c698b9f26ad0ad1769f
- https://git.kernel.org/stable/c/b655c2040ce836afad5643842543567b31f8c11d
Find the bug before an attacker does.
Sign in with GitHub and run your first audit in under a minute. The free plan needs no credit card.