CVE-2026-64163

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 36/100
Published: 2026-07-19 Modified: 2026-10-30 First seen: 2026-10-30 Status: active

Attack Surface

Low Complexity No Interaction

CVSS Vector Breakdown

AV: Local
AC: Low
PR: Low
UI: None
S: Unchanged
C: None
I: None
A: High

Description

In the Linux kernel, the following vulnerability has been resolved: test_kprobes: clear kprobes between test runs Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel. [root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run ... # Totals: pass:5 fail:0 skip:0 total:5 ok 1 kprobes_test [root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run ... # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64 Expected 0 == register_kprobe(&kp), but register_kprobe(&kp) == -22 (0xffffffffffffffea) ... Unable to handle kernel paging request ... The testsuite defines several kprobes and kretprobes as static variables that are preserved across test runs. After register_kprobe and unregister_kprobe, a kprobe contains some leftover data that must be cleared before the kprobe can be registered again. The tests are setting symbol_name to define the probe location. Address and flags must be cleared. The existing code clears some of the probes between subsequent tests, but not between two test runs. The leftover data from a previous test run makes the registrations fail in the next run. Move the cleanups for all kprobes into kprobes_test_init, this function is called before each single test (including the first test of a test run).

Affected Software (11)

VendorProductVersion
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < 29ec976006dfab171a7e007976e38af56ce286e4
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < 08d355936fcf70c81c94f9fe7310450b65c53399
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < accc0004c501a9918313142282b094d408af06fb
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < 1c24cf1fd67f6702c719ab73499392cb7af956ae
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < 96515819d79f356f40da5540968d838ea570fab9
Linux Linux e44e81c5b90f698025eadceb7eef8661eda117d5 < ef5581bb30efb939cc2bf093475c6cc85258e5cd
Linux Linux 5.16
linux linux_kernel 5.16 – 6.6.142
linux linux_kernel 7.1
linux linux_kernel 7.1
linux linux_kernel 7.1

Bug Bounty Relevance

36 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

5.5 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS — Exploitation Probability

0.12%
Raw Score 0.001200
Percentile 1.8%
Date 2026-11-01

EPSS Trend

2026-11-01
0.00120
2026-10-31
0.00120
2026-10-30
0.00119
2026-10-29
0.00119

Intelligence Sources

mitre ref →
nvd ref →