PT-2026-61392 · Linux · Linux
CVE-2026-64075
·
Published
2026-07-19
·
Updated
2026-07-19
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
In the Linux kernel, the following vulnerability has been resolved:
fprobe: Fix unregister fprobe() to wait for RCU grace period
Commit 4346ba1604093 ("fprobe: Rewrite fprobe on function-graph tracer")
changed fprobe to register struct fprobe to an rcu-hlist, but it forgot
to wait for RCU GP. Thus there can be use-after-free if the fprobe is
released right after unregistering. This can be happened on fprobe
event and sample module code.
To fix this issue, add synchronize rcu() in unregister fprobe().
Note that BPF is OK because fprobe is used as a part of
bpf kprobe multi link. This unregisters its fprobe in
bpf kprobe multi link release() and it is deallocated via
bpf kprobe multi link dealloc(), which is invoked from
bpf link defer dealloc rcu gp() RCU callback.
For BPF, this also introduced unregister fprobe async() which does
NOT wait for RCU grace priod.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Linux