-
CVE-2026-64075
- EPSS 0.17%
- Veröffentlicht 19.07.2026 15:39:49
- Zuletzt bearbeitet 30.07.2026 14:59:47
- CVE-Watchlists
- Unerledigt
fprobe: Fix unregister_fprobe() to wait for RCU grace period
In the Linux kernel, the following vulnerability has been resolved:
fprobe: Fix unregister_fprobe() to wait for RCU grace period
Commit 4346ba1604093 ("fprobe: Rewrite fprobe on function-graph tracer")
changed fprobe to register struct fprobe to an rcu-hlist, but it forgot
to wait for RCU GP. Thus there can be use-after-free if the fprobe is
released right after unregistering. This can be happened on fprobe
event and sample module code.
To fix this issue, add synchronize_rcu() in unregister_fprobe().
Note that BPF is OK because fprobe is used as a part of
bpf_kprobe_multi_link. This unregisters its fprobe in
bpf_kprobe_multi_link_release() and it is deallocated via
bpf_kprobe_multi_link_dealloc(), which is invoked from
bpf_link_defer_dealloc_rcu_gp() RCU callback.
For BPF, this also introduced unregister_fprobe_async() which does
NOT wait for RCU grace priod.Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt
Linux
Default Statusunaffected
Version
4346ba1604093305a287e08eb465a9c15ba05b80
Version <
56b4cfcf1518245493c60fd39c56978f508f1816
Status
affected
Version
4346ba1604093305a287e08eb465a9c15ba05b80
Version <
a4f6a9005ed6cfd360ef2520430927f05f92ffb0
Status
affected
Version
4346ba1604093305a287e08eb465a9c15ba05b80
Version <
657b594b2084b39a4bc6d8493aa2140cb00cea49
Status
affected
HerstellerLinux
≫
Produkt
Linux
Default Statusaffected
Version
6.14
Status
affected
Version
0
Version <
6.14
Status
unaffected
Version <=
6.18.*
Version
6.18.34
Status
unaffected
Version <=
7.0.*
Version
7.0.11
Status
unaffected
Version <=
*
Version
7.1
Status
unaffected
VulnDex Vulnerability Enrichment
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.17% | 0.062 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|
https://git.kernel.org/stable/c/56b4cfcf1518245493c60fd39c56978f508f1816
https://git.kernel.org/stable/c/a4f6a9005ed6cfd360ef2520430927f05f92ffb0
https://git.kernel.org/stable/c/657b594b2084b39a4bc6d8493aa2140cb00cea49