CVE-2026-93222

Impact

In the Linux kernel, the following vulnerability has been resolved: signal: avoid shared siginfo namespace rewrites send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next. Copy the siginfo before changing it.

Affected packages

This record carries no package version data, so it cannot be matched against a dependency list automatically. Read the advisory and compare your version by hand.

References

• NVD record
• CVE.org record
• https://git.kernel.org/stable/c/03c8761e75d1619906bb503686f9cc1dfc6a67f4
• https://git.kernel.org/stable/c/148b0dae2a1755beb873a2aab51fb191414f068c
• https://git.kernel.org/stable/c/4ee7c4e4719a825052f42f02ec159b5b42b68fbc
• https://git.kernel.org/stable/c/6b1de022304ef85284c5933a5fb8492f6f54efc9
• https://git.kernel.org/stable/c/a246da20c8e4ae4319511c698b9f26ad0ad1769f
• https://git.kernel.org/stable/c/b655c2040ce836afad5643842543567b31f8c11d
• https://git.kernel.org/stable/c/d19cdc167e696714509e87d3f7ae765b6e164589
• https://git.kernel.org/stable/c/e015d1ac6b43a23c52c5163299414ae77d7d4ae0