Vulnerability feed
CVE and vendor PSIRT advisories from 13 sources, last 30 days. Updated hourly, last run
| Expand | Severity |
Score |
Advisory |
Title |
Source |
Flags |
Published |
|---|---|---|---|---|---|---|---|
| Unknown | n/a | CVE-2026-98888 |
In the Linux kernel, the following vulnerability has been resolved:
arm64: kprobes: Allow reentering kprobes while single-stepping
A kprobe can be hit while another kprobe is...
LinuxLinux, Linux kernel, Linux arm64 kprobes
|
NVD | |||
|
CVE-2026-98888In the Linux kernel, the following vulnerability has been resolved:
arm64: kprobes: Allow reentering kprobes while single-stepping
A kprobe can be hit while another kprobe is...
Executive summaryA flaw in the arm64 kernel's kprobe debugging code could leave interrupts permanently disabled when one kprobe is hit while another is single-stepping. The advisory does not state a severity rating, and it does not describe an exploit. The advisory does not state a vendor recommendation or a fixed version. Technical summaryThe arm64 kprobe handler treated a kprobe hit during the KPROBE_HIT_SS state as unrecoverable, when it is a one-level reentry that can be handled. The fix moves KPROBE_HIT_SS into the recoverable reentry cases and extends struct prev_kprobe with a saved_irqflag field, so a nested kprobe no longer overwrites the outer kprobe's DAIF state. Without the fix, the outer single-step can leave interrupts permanently disabled. The advisory describes the triggering condition as tracing or perf code running from the debug exception path, but it does not state an attack vector, privileges required, affected or fixed kernel versions, workarounds, or detection guidance. The advisory also does not state a CVSS score or whether the issue is exploited in the wild. The fix mirrors an x86 commit, 6a5022a56ac3. Summaries are generated by AI from the linked advisory text. Confirm versions and fixes at the source. ScoreNo CVSS score published. Affects
NIST National Vulnerability DatabasePublished
Read the advisory
|
|||||||