PT-2026-61392 · Linux+1 · Linux Kernel+1

CVE-2026-64075

·

Published

2026-07-19

·

Updated

2026-09-07

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)
Description A use-after-free issue exists in the unregister fprobe() function. This occurs because the function fails to wait for the Read-Copy-Update (RCU) grace period—a synchronization mechanism that ensures all current readers have finished accessing data before it is deleted—after unregistering a struct fprobe from an rcu-hlist. This flaw can be triggered during fprobe events and within sample module code.
Recommendations Update the Linux kernel to a version that includes the fix adding synchronize rcu() to the unregister fprobe() function.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2026-64075
USN-8593-1
USN-8603-1
USN-8618-1
USN-8663-1
USN-8664-1
USN-8728-1

Affected Products

Linux Kernel
Ubuntu