PT-2026-61392 · Linux · Linux
CVE-2026-64075
·
Publicado
2026-07-19
·
Atualizado
2026-07-19
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
fprobe: Fix unregister fprobe() to wait for RCU grace period
Commit 4346ba1604093 ("fprobe: Rewrite fprobe on function-graph tracer")
changed fprobe to register struct fprobe to an rcu-hlist, but it forgot
to wait for RCU GP. Thus there can be use-after-free if the fprobe is
released right after unregistering. This can be happened on fprobe
event and sample module code.
To fix this issue, add synchronize rcu() in unregister fprobe().
Note that BPF is OK because fprobe is used as a part of
bpf kprobe multi link. This unregisters its fprobe in
bpf kprobe multi link release() and it is deallocated via
bpf kprobe multi link dealloc(), which is invoked from
bpf link defer dealloc rcu gp() RCU callback.
For BPF, this also introduced unregister fprobe async() which does
NOT wait for RCU grace priod.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Linux