CVE-2026-93278: linux

CVSS: UnknownReceived
AliasesUBUNTU-CVE-2026-93278DEBIAN-CVE-2026-93278
Published 24-09-2026Last modified 19-10-2026
Open JSON

Vulnerability summary

CVE-2026-93278 is a vulnerability in linux with no CVSS score yet. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 8.3% of scored vulnerabilities.

Overall risk
0/100
0100
Minimal · default modelHow is this calculated?
CVSS score
Not scored
010
No CVSS score recorded
EPSS score
0.19%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 2 · Related 1
MGASA-2026-0506OPENSUSE-SU-2026:12074-1

Timeline

  1. 24-09-2026
    PublishedVulnerability first disclosed.
  2. 19-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: staging: octeon: add missing napi_disable in cvm_oct_rx_shutdown cvm_oct_rx_shutdown calls free_irq and netif_napi_del without disabling the napi instance first. As the free_irq only waits for completion of hard interrupt handlers, the napi poll function could still be active. If cvm_oct_remove proceeds to free the plat structure (which holds the NAPI instances), the active poll function will access freed memory, resulting in a use-after-free crash.

CVSS metrics

Risk metrics not yet published.

EPSS trend

Probability

0.19%

Chance of exploitation in the next 30 days

Percentile

8%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

25-09-202621-10-2026
EPSS score
0.19%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Ubuntu169 products
  • linuxAll versions (No fix recorded)
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded)
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linuxAll versions (No fix recorded) | < 6.1.190-1 | < 6.12.111-1 | < 7.2.6-1
  • linux-6.12< 6.12.111-1~deb12u1
Linux1 product
  • linux≥ 3368c784bcf77124aaf39372e627016c36bd4472, < 158389d7af04bbf0664d91c2ce31fcc9eeace1eb | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < c124049c3a7006fd6caf629139a5722610bbffb4 | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < 98f9036b2254c928cb44da0c77dba38f66f7d8f1 | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < b38fbd68cc36b4f478a1e3cfc169b8616ae1337d | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < 89f9f433271fad9351de6a3c713b45b2cfb23e4a | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < b2243ffaac14cc3639b5b32a371aac37f96ee554 | ≥ 3368c784bcf77124aaf39372e627016c36bd4472, < c0a9a8586a63fda49e61a6b83360feac2a60d898 | 2.6.34

3 vendors · 172 products

References

10 links