Linux Kernel Kprobes Vulnerability Impacts Performance and Stability

CVE-2026-98888

What is CVE-2026-98888?

A flaw in the Linux kernel's kprobes feature allows for improper handling of reentering kprobes while in a single-stepping state. This situation arises during the execution of tracing or performance monitoring code in debug exceptions. Currently, the kernel treats this condition as an unrecoverable state, leading to potential system stability issues. The new fix classifies the KPROBE_HIT_SS hit as recoverable, facilitating a smoother reentry process by preserving the kprobe's state. This update ensures that the original interrupt state remains intact, preventing unintentional disruptions in system operation.

References