Linux Kernel Vulnerability in Kprobes Affecting x86 Architecture

CVE-2026-98856

What is CVE-2026-98856?

A vulnerability in the Linux kernel affects the handling of kprobes on x86 architecture, where disarmed probes can create a potential for executing unintended instructions. Specifically, when attempting to arm a new probe, the optimization logic fails to skip over disarmed probes that might interfere with the operation. This situation could lead to incorrect address jumps during execution. The fix involves enhancing the logic to properly navigate through inactive and prepared probes, ensuring that only active optimized probes are considered, thus maintaining the integrity of instruction execution.

References