« Volver al listado

CVE-2026-93146

Estado: RecibidaSin puntuar—

In the Linux kernel, the following vulnerability has been resolved:

time/namespace: Validate nanosecond field in proc_timens_set_offset()

The function validates tv_sec to be within [-KTIME_SEC_MAX, KTIME_SEC_MAX] but never validates that tv_nsec is within the valid range of [0, NSEC_PER_SEC-1] before using it in timespec64_add().

timespec64_add() expects both timespec64 structures to have normalized values with tv_nsec in the range [0, 999999999]. If off->val.tv_nsec contains invalid values (negative or >= NSEC_PER_SEC), it could lead to incorrect calculations or unexpected behavior.

Add validation to ensure tv_nsec is within the valid range before performing the addition.

CVSS

NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.

Linux — Linux KernelAI

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2026-93146",
  "cveTags": [],
  "metrics": {},
  "affected": [
    {
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
      "affectedData": [
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "04a8682a71becdb639ec9c0d82b315a2baef7a5d",
              "lessThan": "db667d2970c756cc7b483f45f272440f845a665b",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "04a8682a71becdb639ec9c0d82b315a2baef7a5d",
              "lessThan": "1f0c3c0c36c7aedf55a60d9c71c4bd258b8937ce",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "04a8682a71becdb639ec9c0d82b315a2baef7a5d",
              "lessThan": "06aba58e58492d2b8eae059274caed29025ea96e",
              "versionType": "git"
            }
          ],
          "programFiles": [
            "kernel/time/namespace.c"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "product": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "5.6"
            },
            {
              "status": "unaffected",
              "version": "0",
              "lessThan": "5.6",
              "versionType": "semver"
            },
            {
              "status": "unaffected",
              "version": "6.18.52",
              "versionType": "semver",
              "lessThanOrEqual": "6.18.*"
            },
            {
              "status": "unaffected",
              "version": "7.2.6",
              "versionType": "semver",
              "lessThanOrEqual": "7.2.*"
            },
            {
              "status": "unaffected",
              "version": "7.3-rc1",
              "versionType": "original_commit_for_fix",
              "lessThanOrEqual": "*"
            }
          ],
          "programFiles": [
            "kernel/time/namespace.c"
          ],
          "defaultStatus": "affected"
        }
      ]
    }
  ],
  "published": "2026-09-17T17:18:09.757",
  "references": [
    {
      "url": "https://git.kernel.org/stable/c/06aba58e58492d2b8eae059274caed29025ea96e",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/1f0c3c0c36c7aedf55a60d9c71c4bd258b8937ce",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    },
    {
      "url": "https://git.kernel.org/stable/c/db667d2970c756cc7b483f45f272440f845a665b",
      "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
    }
  ],
  "vulnStatus": "Received",
  "descriptions": [
    {
      "lang": "en",
      "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntime/namespace: Validate nanosecond field in proc_timens_set_offset()\n\nThe function validates tv_sec to be within [-KTIME_SEC_MAX, KTIME_SEC_MAX]\nbut never validates that tv_nsec is within the valid range of\n[0, NSEC_PER_SEC-1] before using it in timespec64_add().\n\ntimespec64_add() expects both timespec64 structures to have normalized\nvalues with tv_nsec in the range [0, 999999999]. If off->val.tv_nsec\ncontains invalid values (negative or >= NSEC_PER_SEC), it could lead to\nincorrect calculations or unexpected behavior.\n\nAdd validation to ensure tv_nsec is within the valid range before\nperforming the addition."
    }
  ],
  "lastModified": "2026-09-17T17:18:09.757",
  "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}