CVE-2026-80607

A flaw was found in the Linux kernel's tracing/probes component. A local user could trigger a kernel warning (WARN_ON_ONCE) by adding a kprobe event based on a raw address with a BTF (BPF Type Format) parameter. This could lead to minor information disclosure through kernel log messages.

A low impact flaw was found in the Linux kernel's tracing/probes subsystem, affecting the kernel packages in Red Hat Enterprise Linux 10 and Red Hat In-Vehicle OS 2. A local user with the ability to create kprobe events could trigger a kernel warning (WARN_ON_ONCE) in parse_btf_arg() by adding a kprobe event based on a raw address with a BTF (BPF Type Format) parameter. The direct consequence of triggering this warning is kernel log output; there is no evidence of memory corruption or privilege escalation. On systems configured with panic_on_warn, the warning could additionally be turned into a local denial of service. Red Hat Enterprise Linux 6, 7, 8, and 9, including their kernel-rt packages, are not affected because the vulnerable code is not present in those streams. For the affected streams, the fix, which removes the WARN_ON_ONCE() because this condition is not unexpected, is currently deferred; the residual risk is limited to user-triggerable kernel warnings and log noise, with a possible panic on panic_on_warn systems. Red Hat rates the overall impact of this flaw as low: although the CVSS 3.1 base score is 5.5 (MODERATE) due to its availability impact, successful exploitation only results in a kernel warning.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.