---
id: CVE-2026-93147
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/bpf: Replace ly instruction with llgf

  cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when ly loads
  the cpu_nr into BPF_REG_0 it does not zero the up…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  s390/bpf: Replace ly instruction with llgf

  cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when ly loads
  the cpu_nr into BPF_REG_0 it does not zero the up…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 9012cf2491e3c5d28d098b0d6da804af82977032 <
    88500a86ab79f01c568de6ed00f5b1c5c79f11d5
  - >-
    Linux >= 9012cf2491e3c5d28d098b0d6da804af82977032 <
    5f6cc299938b561cb01e343bab7042611fcee12a
  - Linux 7.2
published: '2026-09-17'
updated: '2026-09-18'
sourceUpdated: '2026-09-18T18:18:22.650'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-93147'
references:
  - url: 'https://git.kernel.org/stable/c/5f6cc299938b561cb01e343bab7042611fcee12a'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/88500a86ab79f01c568de6ed00f5b1c5c79f11d5'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
epss: 0.00154
epssPercentile: 0.04906
ingestedAt: '2026-09-17T16:21:47.742Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

s390/bpf: Replace ly instruction with llgf

cpu_nr is a 32 bit value and BPF_REG_0 is a 64 bit register, when ly loads
the cpu_nr into BPF_REG_0 it does not zero the upper bits, but llgf does.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.