CVE-2026-89988

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the within kprobe blacklist() function traverses the kprobe blacklist without holding the kprobe mutex. When a module is unloaded, the kprobe remove area blacklist() function removes blacklist entries and immediately frees them using kfree(). This can lead to a use-after-free scenario where a concurrent call to within kprobe blacklist() dereferences freed memory. Additionally, within kprobe blacklist() may be executed in atomic or non-preemptible contexts, making it impossible to acquire the sleeping kprobe mutex.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.