A subtle ordering bug in the Linux kernel's kprobes cleanup code quietly turned into a denial-of-service risk: CVE-2022-50266 patches a logic error in kill_kprobe so that ftrace-backed probes are properly disarmed before a probe is marked gone, preventing ftrace from referencing invalid probe...
A newly published Linux-kernel vulnerability, tracked as CVE-2025-40042, fixes a race condition in kprobe initialization that can lead to a NULL-pointer dereference and a kernel crash — a local, availability-focused defect that has been upstreamed into the kernel stable trees and is being...