CVE-2026-43409

A flaw was found in the Linux kernel's kprobes subsystem. When the ftrace tracing utility is disabled due to errors, a local user can cause a system crash by removing a kernel module that uses kprobe probes. This vulnerability arises from kprobes not correctly handling the ftrace disabled state, leading to a denial of service.

This Moderate impact flaw in the Linux kernel's kprobes subsystem allows a local attacker to trigger a system crash, leading to a denial of service. The vulnerability occurs when the ftrace tracing utility is in an error state and a kernel module utilizing kprobe probes is subsequently removed. This specific interaction can destabilize the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.