Skip to main content
VulnerabilityPublished Updated

CVE-2026-64163: Linux kernel · test_kprobes: clear kprobes between test runs

Affects Linux kernelSource CVE Database V5

0
Compare

Not known to be exploited · fixed in ef5581bb30efb939cc2bf093475c6cc85258e5cd : update Linux kernel when convenient.

Data as of 30 Oct 2026, 13:33 UTC

Severity
Medium

Rated Medium by Threat Radar's AI analysis · No CVSS score from NVD or the CNA

Thin evidence

One scorer or none
Patch
Available – fixed in ef5581bb30efb939cc2bf093475c6cc85258e5cd, accc0004c501a9918313142282b094d408af06fb, 96515819d79f356f40da5540968d838ea570fab9 +3

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 19 Jul 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < ef5581bb30efb939cc2bf093475c6cc85258e5cd
Fixed in
  • ef5581bb30efb939cc2bf093475c6cc85258e5cd
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < accc0004c501a9918313142282b094d408af06fb
Fixed in
  • accc0004c501a9918313142282b094d408af06fb
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < 96515819d79f356f40da5540968d838ea570fab9
Fixed in
  • 96515819d79f356f40da5540968d838ea570fab9
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < 29ec976006dfab171a7e007976e38af56ce286e4
Fixed in
  • 29ec976006dfab171a7e007976e38af56ce286e4
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < 08d355936fcf70c81c94f9fe7310450b65c53399
Fixed in
  • 08d355936fcf70c81c94f9fe7310450b65c53399
LinuxLinuxAffected
  • ≥ e44e81c5b90f698025eadceb7eef8661eda117d5, < 1c24cf1fd67f6702c719ab73499392cb7af956ae
Fixed in
  • 1c24cf1fd67f6702c719ab73499392cb7af956ae

AI-suggested

This vulnerability has been fixed in the Linux kernel. The fix involves clearing all kprobe data before each test run by updating the kprobes_test_init function. Users should update to a Linux kernel version that includes the fix identified by the provided commit hashes. No additional mitigation is required once the fix is applied.

Description

A vulnerability in the Linux kernel's kprobes test suite causes kernel crashes when running the kprobes sanity tests multiple times. The issue arises because kprobe structures retain leftover data between test runs, leading to registration failures and eventual kernel paging faults. The problem is fixed by clearing all kprobe data before each test run.

References

Community reviews

Loading reviews…