CVE-2026-93222

signal: avoid shared siginfo namespace rewrites

State: Published
Severity: Not scored
Published: Sep 24, 2026
Updated: Oct 19, 2026
Reserved: Sep 17, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

signal: avoid shared siginfo namespace rewrites

send_signal_locked() rewrites sender ids for the target namespace. Group sends reuse the same siginfo, so one recipient can affect the next.

Copy the siginfo before changing it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	7a0cf094944e2540758b7f957eb6846d5126f535 to before e015d1ac6b43a23c52c5163299414ae77d7d4ae0Affected 7a0cf094944e2540758b7f957eb6846d5126f535 to before 4ee7c4e4719a825052f42f02ec159b5b42b68fbcAffected 7a0cf094944e2540758b7f957eb6846d5126f535 to before 148b0dae2a1755beb873a2aab51fb191414f068cAffected 7a0cf094944e2540758b7f957eb6846d5126f535 to before 6b1de022304ef85284c5933a5fb8492f6f54efc9Affected 7a0cf094944e2540758b7f957eb6846d5126f535 to before 03c8761e75d1619906bb503686f9cc1dfc6a67f4Affected 7a0cf094944e2540758b7f957eb6846d5126f535 to before a246da20c8e4ae4319511c698b9f26ad0ad1769fAffected 7a0cf094944e2540758b7f957eb6846d5126f535 to before b655c2040ce836afad5643842543567b31f8c11dAffected 7a0cf094944e2540758b7f957eb6846d5126f535 to before d19cdc167e696714509e87d3f7ae765b6e164589Affected e897dd22800f02bd48aefb1511fff0b2ce96e94cAffected 2f0e9eed11ca778d0ec5507a739c28472fd4ca20Affected 5.1.20 to before 5.2Affected 5.2.3 to before 5.3Affected
LinuxLinux	5.3Affected before 5.3Not affected 5.10.270 through 5.10.Not affected 5.15.221 through 5.15.Not affected 6.1.188 through 6.1.Not affected 6.6.157 through 6.6.Not affected 6.12.109 through 6.12.Not affected 6.18.50 through 6.18.Not affected 7.2.4 through 7.2.*Not affected 7.3 and laterNot affected

Product

Versions

LinuxLinux

7a0cf094944e2540758b7f957eb6846d5126f535 to before e015d1ac6b43a23c52c5163299414ae77d7d4ae0Affected
7a0cf094944e2540758b7f957eb6846d5126f535 to before 4ee7c4e4719a825052f42f02ec159b5b42b68fbcAffected
7a0cf094944e2540758b7f957eb6846d5126f535 to before 148b0dae2a1755beb873a2aab51fb191414f068cAffected
7a0cf094944e2540758b7f957eb6846d5126f535 to before 6b1de022304ef85284c5933a5fb8492f6f54efc9Affected
7a0cf094944e2540758b7f957eb6846d5126f535 to before 03c8761e75d1619906bb503686f9cc1dfc6a67f4Affected
7a0cf094944e2540758b7f957eb6846d5126f535 to before a246da20c8e4ae4319511c698b9f26ad0ad1769fAffected
7a0cf094944e2540758b7f957eb6846d5126f535 to before b655c2040ce836afad5643842543567b31f8c11dAffected
7a0cf094944e2540758b7f957eb6846d5126f535 to before d19cdc167e696714509e87d3f7ae765b6e164589Affected
e897dd22800f02bd48aefb1511fff0b2ce96e94cAffected
2f0e9eed11ca778d0ec5507a739c28472fd4ca20Affected
5.1.20 to before 5.2Affected
5.2.3 to before 5.3Affected

LinuxLinux

5.3Affected
before 5.3Not affected
5.10.270 through 5.10.*Not affected
5.15.221 through 5.15.*Not affected
6.1.188 through 6.1.*Not affected
6.6.157 through 6.6.*Not affected
6.12.109 through 6.12.*Not affected
6.18.50 through 6.18.*Not affected
7.2.4 through 7.2.*Not affected
7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.