{ "advisories": [ { "id": "USN-8593-1", "source": "usn", "title": "Linux kernel vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8593-1" }, { "id": "USN-8603-1", "source": "usn", "title": "Linux kernel (Azure) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8603-1" }, { "id": "USN-8618-1", "source": "usn", "title": "Linux kernel vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8618-1" }, { "id": "USN-8663-1", "source": "usn", "title": "Linux kernel (NVIDIA) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8663-1" }, { "id": "USN-8664-1", "source": "usn", "title": "Linux kernel (NVIDIA BaseOS) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8664-1" }, { "id": "USN-8728-1", "source": "usn", "title": "Linux kernel (GCP) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8728-1" }, { "id": "USN-8729-1", "source": "usn", "title": "Linux kernel vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8729-1" }, { "id": "USN-8761-1", "source": "usn", "title": "Linux kernel (Azure) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8761-1" }, { "id": "USN-8729-2", "source": "usn", "title": "Linux kernel (Raspberry Pi Real-time) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8729-2" }, { "id": "USN-8761-2", "source": "usn", "title": "Linux kernel (Azure FIPS) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8761-2" }, { "id": "USN-8781-1", "source": "usn", "title": "Linux kernel (NVIDIA Tegra) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8781-1" }, { "id": "USN-8729-3", "source": "usn", "title": "Linux kernel vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8729-3" }, { "id": "USN-8802-1", "source": "usn", "title": "Linux kernel (Oracle) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8802-1" }, { "id": "USN-8728-2", "source": "usn", "title": "Linux kernel (Azure) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8728-2" }, { "id": "USN-8729-4", "source": "usn", "title": "Linux kernel (Low Latency) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8729-4" }, { "id": "USN-8729-5", "source": "usn", "title": "Linux kernel (AWS FIPS) vulnerabilities", "url": "https://ubuntu.com/security/notices/USN-8729-5" } ], "cve": "CVE-2026-64163", "enrichment": { "affected": [ { "configurations": [ { "platform": null, "status": "affected", "versions": { "scheme": "code_commit", "value": "[e44e81c5b90f698025eadceb7eef8661eda117d5,08d355936fcf70c81c94f9fe7310450b65c53399)" } }, { "platform": null, "status": "affected", "versions": { "scheme": "code_commit", "value": "[e44e81c5b90f698025eadceb7eef8661eda117d5,accc0004c501a9918313142282b094d408af06fb)" } }, { "platform": null, "status": "affected", "versions": { "scheme": "code_commit", "value": "[e44e81c5b90f698025eadceb7eef8661eda117d5,1c24cf1fd67f6702c719ab73499392cb7af956ae)" } }, { "platform": null, "status": "affected", "versions": { "scheme": "code_commit", "value": "[e44e81c5b90f698025eadceb7eef8661eda117d5,96515819d79f356f40da5540968d838ea570fab9)" } }, { "platform": null, "status": "affected", "versions": { "scheme": "code_commit", "value": "[e44e81c5b90f698025eadceb7eef8661eda117d5,ef5581bb30efb939cc2bf093475c6cc85258e5cd)" } } ], "enrichment": { "confidence": 99.0, "confidence_source": "inferred", "scores": [ { "score": 99.0, "source": "inferred" }, { "score": 100.0, "source": "matching" } ] }, "original": { "product": "Linux", "source": "cna", "vendor": "Linux" }, "product": "linux_kernel", "vendor": "linux" }, { "configurations": [ { "platform": null, "status": "affected", "versions": { "scheme": "generic", "value": "5.16" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "generic", "value": "[0,5.16)" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "semver", "value": "[6.6.142,6.7.0)" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "semver", "value": "[6.12.92,6.13.0)" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "semver", "value": "[6.18.34,6.19.0)" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "semver", "value": "[7.0.11,7.1.0)" } }, { "platform": null, "status": "unaffected", "versions": { "scheme": "generic", "value": "[7.1,*]" } } ], "enrichment": { "confidence": 99.0, "confidence_source": "inferred", "scores": [ { "score": 99.0, "source": "inferred" }, { "score": 100.0, "source": "matching" } ] }, "original": { "product": "Linux", "source": "cna", "vendor": "Linux" }, "product": "linux_kernel", "vendor": "linux" } ], "created": "2026-07-21T21:00:12.869816+00:00", "updated": "2026-08-13T19:15:03.457792+00:00", "vendors": [ "linux", "linux$PRODUCT$linux_kernel" ] }, "epss": { "score": 0.00162 }, "mitre": { "cpes": [ "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ], "created": "2026-07-19T15:40:49.172000+00:00", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # Totals: pass:5 fail:0 skip:0 total:5\n ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n Expected 0 == register_kprobe(&kp), but\n register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).", "metrics": { "cvssV2_0": {}, "cvssV3_0": {}, "cvssV3_1": {}, "cvssV4_0": {} }, "mitre_repo_path": "cves/2026/64xxx/CVE-2026-64163.json", "references": [ "https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399", "https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae", "https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9", "https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb", "https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd" ], "title": "test_kprobes: clear kprobes between test runs", "updated": "2026-07-19T15:40:49.172000+00:00", "vendors": [ "linux", "linux$PRODUCT$linux_kernel" ], "weaknesses": [] }, "nvd": { "cpes": [ "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*" ], "created": "2026-07-19T16:17:58.327000+00:00", "description": "In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # Totals: pass:5 fail:0 skip:0 total:5\n ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n Expected 0 == register_kprobe(&kp), but\n register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).", "metrics": { "cvssV2_0": {}, "cvssV3_0": {}, "cvssV3_1": { "score": 5.5, "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "cvssV4_0": {} }, "nvd_repo_path": "2026/CVE-2026-64163.json", "references": [ "https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399", "https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae", "https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9", "https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb", "https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd" ], "title": null, "updated": "2026-08-13T15:32:53.703000+00:00", "vendors": [ "linux", "linux$PRODUCT$linux_kernel" ], "weaknesses": [ "NVD-CWE-noinfo" ] }, "opencve": { "changes": [ { "created": "2026-07-19T16:15:00+00:00", "data": [ { "details": { "new": "In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # Totals: pass:5 fail:0 skip:0 total:5\n ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n Expected 0 == register_kprobe(&kp), but\n register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).", "old": null }, "type": "description" }, { "details": { "new": "test_kprobes: clear kprobes between test runs", "old": null }, "type": "title" }, { "details": [ "linux", "linux$PRODUCT$linux_kernel" ], "type": "first_time" }, { "details": { "added": [ "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*" ], "removed": [] }, "type": "cpes" }, { "details": { "added": [ "linux", "linux$PRODUCT$linux_kernel" ], "removed": [] }, "type": "vendors" }, { "details": { "added": [ "https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399", "https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae", "https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9", "https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb", "https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd" ], "removed": [] }, "type": "references" } ], "id": "0d9aa374-96e1-43e0-a604-4261ad4900ab" }, { "created": "2026-07-21T00:15:00+00:00", "data": [ { "details": { "added": [ "CWE-459" ], "removed": [] }, "type": "weaknesses" }, { "details": { "added": [ "https://lore.kernel.org/linux-cve-announce/2026071934-CVE-2026-64163-f1a4@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64163", "https://www.cve.org/CVERecord?id=CVE-2026-64163" ], "removed": [] }, "type": "references" }, { "details": { "added": { "cvssV3_1": { "score": 5.5, "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" } }, "removed": {}, "updated": { "threat_severity": { "new": "Low", "old": null } } }, "type": "metrics" } ], "id": "5eebbe6c-91ac-48c7-8b34-0b9c6e1b3763" }, { "created": "2026-08-13T15:45:00+00:00", "data": [ { "details": { "added": [ "NVD-CWE-noinfo" ], "removed": [] }, "type": "weaknesses" }, { "details": { "added": [ "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*" ], "removed": [] }, "type": "cpes" } ], "id": "e5c733df-3161-4652-b196-4562d28d986a" } ], "cpes": { "data": [ "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:*", "cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:*" ], "providers": [ "mitre", "nvd" ] }, "created": { "data": "2026-07-19T00:00:00+00:00", "provider": "redhat" }, "description": { "data": "In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # Totals: pass:5 fail:0 skip:0 total:5\n ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n Expected 0 == register_kprobe(&kp), but\n register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).", "provider": "mitre" }, "metrics": { "cvssV2_0": { "data": {}, "provider": null }, "cvssV3_0": { "data": {}, "provider": null }, "cvssV3_1": { "data": { "score": 5.5, "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "provider": "nvd" }, "cvssV4_0": { "data": {}, "provider": null }, "epss": { "data": { "score": 0.00162 }, "provider": "first" }, "kev": { "data": {}, "provider": null }, "ssvc": { "data": {}, "provider": null }, "threat_severity": { "data": "Low", "provider": "redhat" } }, "references": { "data": [ "https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399", "https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae", "https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9", "https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb", "https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd", "https://lore.kernel.org/linux-cve-announce/2026071934-CVE-2026-64163-f1a4@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64163", "https://www.cve.org/CVERecord?id=CVE-2026-64163" ], "providers": [ "mitre", "nvd", "redhat" ] }, "title": { "data": "test_kprobes: clear kprobes between test runs", "provider": "mitre" }, "updated": { "data": "2026-08-13T15:32:53.703000+00:00", "provider": "nvd" }, "vendors": { "data": [ "linux", "linux$PRODUCT$linux_kernel" ], "providers": [ "mitre", "nvd", "enrichment" ] }, "weaknesses": { "data": [ "CWE-459", "NVD-CWE-noinfo" ], "providers": [ "nvd", "redhat" ] } }, "redhat": { "cpes": [], "created": "2026-07-19T00:00:00+00:00", "description": "In the Linux kernel, the following vulnerability has been resolved:\ntest_kprobes: clear kprobes between test runs\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n# Totals: pass:5 fail:0 skip:0 total:5\nok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n# test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\nExpected 0 == register_kprobe(&kp), but\nregister_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\nUnable to handle kernel paging request ...\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).", "metrics": { "cvssV2_0": {}, "cvssV3_0": {}, "cvssV3_1": { "score": 5.5, "vector": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H" }, "threat_severity": "Low" }, "redhat_repo_path": "2026/CVE-2026-64163.json", "references": [ "https://lore.kernel.org/linux-cve-announce/2026071934-CVE-2026-64163-f1a4@gregkh/T", "https://nvd.nist.gov/vuln/detail/CVE-2026-64163", "https://www.cve.org/CVERecord?id=CVE-2026-64163" ], "title": "kernel: test_kprobes: clear kprobes between test runs", "updated": "2026-07-19T00:00:00+00:00", "vendors": [], "weaknesses": [ "CWE-459" ] } }