CVE Database›Document archive›CVE-2026-64075

CVE-2026-64075

kernel: fprobe: Fix unregister_fprobe() to wait for RCU grace period

Loading…

Severity

Low

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · July 19, 2026

Updated · October 20, 2026

Description

A flaw was found in the Linux kernel's fprobe mechanism. The 'unregister_fprobe()' function did not properly wait for the RCU (Read-Copy-Update) grace period, which is a synchronization mechanism. This oversight could lead to a use-after-free vulnerability, where memory is deallocated while still being accessed. Such a flaw can result in system instability, leading to a denial of service, and in some cases, could be exploited by a local attacker to achieve arbitrary code execution.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE-825 · Expired Pointer Dereference