PT-2026-44319 · Linux · Linux Kernel

Published 2026-05-28 · Updated 2026-06-19 · CVE-2026-46196

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to kernel-devel-7.0.11-1.1

Description An issue exists in the tracepoint add func() function where the subsystem's ext->regfunc() is invoked before attempting to install a new probe via func add(). If func add() fails, such as when allocate probes() cannot allocate a new probe array due to memory pressure and returns -ENOMEM, the function returns an error without calling the corresponding ext->unregfunc(). This leaves the side effects of regfunc() active without an installed probe. For syscall tracepoints, syscall regfunc() increases sys tracepoint refcount and sets SYSCALL TRACEPOINT on every task; a failure results in the refcount remaining non-zero and tasks continuing to incur syscall trace entry/exit overhead until a reboot. Other subsystems using regfunc() and unregfunc() pairs may experience similar persistent state issues.

Recommendations Update to version kernel-devel-7.0.11-1.1 or later.

Exploit

Fix

Related Identifiers

CVE-2026-46196

ECHO-D547-025C-63EF

OPENSUSE-SU-2026:10954-1

Affected Products

Linux Kernel

References · 297

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/46xxx/CVE-2026-46196.json · Exploit
• https://git.kernel.org/stable/c/2c5b8eeea006eb694c81631cd5713d494b80be90 · Patch
• https://osv.dev/vulnerability/DEBIAN-CVE-2026-46196 · Vendor Advisory
• https://ubuntu.com/security/CVE-2026-46196 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2026:10954-1 · Vendor Advisory
• https://git.kernel.org/stable/c/342829e042ac00f3d68d442ea92873fb6683f494 · Patch
• https://security-tracker.debian.org/tracker/CVE-2026-46196 · Vendor Advisory
• https://git.kernel.org/stable/c/fad217e16fded7f3c09f8637b0f6a224d58b5f2e · Patch
• https://cve.org/CVERecord?id=CVE-2026-46196 · Security Note
• https://osv.dev/vulnerability/BELL-CVE-2026-46196 · Vendor Advisory
• https://git.kernel.org/stable/c/247ed8a969f981bfba3112fd4bb441eaa6cef59c · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2026-46196 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-46196 · Security Note
• https://osv.dev/vulnerability/CVE-2026-46196 · Vendor Advisory
• https://git.kernel.org/stable/c/7bcadb3c2bc1cf60690e931aadd35fb7bd646a49 · Patch