CVE-2026-98273

A flaw was found in the Linux kernel's x86 kprobes subsystem. A privileged local user could cause a Denial of Service (DoS) and system crash when attaching probes to certain function call instructions using tracing tools such as extended Berkeley Packet Filter (eBPF). This issue occurs because the kernel incorrectly calculates the instruction size and return address during emulation of Code Segment (CS) prefixed call instructions, causing the processor to execute corrupted instructions and crash.

This vulnerability is rated as Moderate impact because exploiting it requires local administrative privileges to attach kprobes or load tracing programs. The flaw results exclusively in a kernel panic and denial of service, without impacting data confidentiality or integrity. Standard unprivileged users cannot trigger this crash under default configurations.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.