PT-2026-61392 · Linux+1 · Linux Kernel+1
CVE-2026-64075
·
Published
2026-07-19
·
Updated
2026-09-07
CVSS v3.1
7.8
High
| Vector | AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
A use-after-free issue exists in the
unregister fprobe() function. This occurs because the function fails to wait for the Read-Copy-Update (RCU) grace period—a synchronization mechanism that ensures all current readers have finished accessing data before it is deleted—after unregistering a struct fprobe from an rcu-hlist. This flaw can be triggered during fprobe events and within sample module code.Recommendations
Update the Linux kernel to a version that includes the fix adding
synchronize rcu() to the unregister fprobe() function.Exploit
Fix
Use After Free
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linux Kernel
Ubuntu