# csky: Fix a4/a5 restoration in syscall trace path

CVE record · `CVE-2026-93167`

- **Identifiers:** `CVE-2026-93167`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 17 Sept 2026
- **Updated:** 19 Oct 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 17 Sept 2026, 16:11 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before e9ae8e86eed68bea5d2670eadf61938a43bd2263` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before 64e3ec7a71d3b715e2567f19f64207f04999bb0c` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before 863fa63fd1491f201ac819f805a8db98d2a32c3d` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before e71a3dc5b8d2ea4d9cfbdb135d6b7777de84212e` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before 31c81b376e5f058c7f2c94f69719cf7caec2fc3f` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before a776afa89424570bfa637ebf812ca281a5732904` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before 343aa5275484d627c921a42e8e115cae366be5de` (git)
  - affected: `e0bbb53843b5fdfe464b099217e3b9d97e8a75d7 to before abb81e5ce7d995baa41556b8125fa59e28ba3be8` (git)
  - affected: `108681048cf728a8570e036c34ebd7daa43133b4` (git)
  - affected: `3a5837c692918c229baf63fe7950965d27c48ac2` (git)
  - affected: `5.4.47 to before 5.5` (semver)
  - affected: `5.6.19 to before 5.7` (semver)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `5.7`
  - unaffected: `before 5.7` (semver)
  - unaffected: `5.10.270 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.221 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.188 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.157 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.110 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.52 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.6 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0022, the 12th percentile, on 13 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

This record came from the full history of the CVE Program, published 17 Sept 2026. New records show when each source confirmed them.

## Sources

- [CVE List: CVE-2026-93167](https://www.cve.org/CVERecord?id=CVE-2026-93167)
- [NVD: CVE-2026-93167](https://nvd.nist.gov/vuln/detail/CVE-2026-93167)

### References from the CNA

- <https://git.kernel.org/stable/c/e9ae8e86eed68bea5d2670eadf61938a43bd2263>
- <https://git.kernel.org/stable/c/64e3ec7a71d3b715e2567f19f64207f04999bb0c>
- <https://git.kernel.org/stable/c/863fa63fd1491f201ac819f805a8db98d2a32c3d>
- <https://git.kernel.org/stable/c/e71a3dc5b8d2ea4d9cfbdb135d6b7777de84212e>
- <https://git.kernel.org/stable/c/31c81b376e5f058c7f2c94f69719cf7caec2fc3f>
- <https://git.kernel.org/stable/c/a776afa89424570bfa637ebf812ca281a5732904>
- <https://git.kernel.org/stable/c/343aa5275484d627c921a42e8e115cae366be5de>
- <https://git.kernel.org/stable/c/abb81e5ce7d995baa41556b8125fa59e28ba3be8>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-93167>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-93167/>. Everything for agents: <https://agentprime.io/llms.txt>.