CVE-2026-93824

CVE CVE-2026-93824EUVD EUVD-2026-86213Published 2026-09-24T16:03:02.000ZLast changed 2026-09-25T12:43:33.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: tls: reject the combination of TLS and sockmap TLS and sockmap (BPF psock) integration hides a lot of latent bugs. Bugs which may be more or less relevant for real users but they are definitely exploitable. We could not find anyone actively using this integration so let's reject this config. Adding a TLS socket to a sockmap was already rejected by sk_psock_init() through the inet_csk_has_ulp() check. We need to reject the attempts to configure the TLS keys (rather than adding the ULP itself) because checking prior to the ULP installation is tricky without risking a race with sockmap getting added in parallel (sockmap does not hold the socket lock). This patch is a minimal rejection of the feature. Subsequent patch in the series will do a light dead code removal. Full cleanup would require a major rewrite of the Tx path, we don't need skmsg any more.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux patch: 0; patch: 7.2; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca <c3d4d537337f69e405a36fa561e7292ee4148bf7; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca <460e6486617c17dd19abe8f3fc67d9a6fa25f8ca; d3b18ad31f93d0b6bae105c679018a1ba7daa9ca <a08e780b6cc1153cbff8be55de9ec9da809e344f; patch: 6.18.53; 4.20; patch: 6.12.111

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.