CVE-2026-46196

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the tracepoint add func() function where the subsystem's ext->regfunc() is invoked before attempting to install a new probe via func add(). If func add() fails, such as when allocate probes() cannot allocate a new probe array due to memory pressure and returns -ENOMEM, the function returns an error without calling the corresponding ext->unregfunc(). This leaves the side effects of regfunc() active without an installed probe. For syscall tracepoints, syscall regfunc() increases sys tracepoint refcount and sets SYSCALL TRACEPOINT on every task; a failure results in the refcount remaining non-zero and tasks continuing to incur syscall trace entry/exit overhead until a reboot. Other subsystems using regfunc() and unregfunc() pairs may experience similar persistent state issues.

Recommendations Update to version kernel-devel-7.0.11-1.1 or later.