CVE-2026-64163

test_kprobes: clear kprobes between test runs

State
Published
Severity
Not scored
Published
Jul 19, 2026
Updated
Oct 30, 2026
Reserved
Jul 19, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

test_kprobes: clear kprobes between test runs

Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel.

[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run ... # Totals: pass:5 fail:0 skip:0 total:5 ok 1 kprobes_test [root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run ... # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64 Expected 0 == register_kprobe(&kp), but register_kprobe(&kp) == -22 (0xffffffffffffffea) ... Unable to handle kernel paging request ...

The testsuite defines several kprobes and kretprobes as static variables that are preserved across test runs.

After register_kprobe and unregister_kprobe, a kprobe contains some leftover data that must be cleared before the kprobe can be registered again. The tests are setting symbol_name to define the probe location. Address and flags must be cleared.

The existing code clears some of the probes between subsequent tests, but not between two test runs. The leftover data from a previous test run makes the registrations fail in the next run.

Move the cleanups for all kprobes into kprobes_test_init, this function is called before each single test (including the first test of a test run).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before 29ec976006dfab171a7e007976e38af56ce286e4Affected
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before 08d355936fcf70c81c94f9fe7310450b65c53399Affected
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before accc0004c501a9918313142282b094d408af06fbAffected
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before 1c24cf1fd67f6702c719ab73499392cb7af956aeAffected
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before 96515819d79f356f40da5540968d838ea570fab9Affected
  • e44e81c5b90f698025eadceb7eef8661eda117d5 to before ef5581bb30efb939cc2bf093475c6cc85258e5cdAffected
LinuxLinux
  • 5.16Affected
  • before 5.16Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.142 through 6.6.*Not affected
  • 6.12.92 through 6.12.*Not affected
  • 6.18.34 through 6.18.*Not affected
  • 7.0.11 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.