kprobes

About this tag
Kprobes is a Linux kernel facility for dynamic instrumentation, allowing developers and tracing tools to insert probes into kernel instructions. Recent discussions on WindowsForum.com cover two CVEs affecting kprobes: CVE-2022-50266, a cleanup ordering bug that could cause a denial of service via ftrace-backed probes, and CVE-2025-40042, a race condition during kprobe initialization leading to a NULL-pointer dereference and kernel crash. These threads highlight the importance of proper kprobe handling for system stability and security, particularly in enterprise and development environments relying on kernel tracing.
  1. CVE-2022-50266: Linux kprobes cleanup ordering fix to prevent DoS

    A subtle ordering bug in the Linux kernel's kprobes cleanup code quietly turned into a denial-of-service risk: CVE-2022-50266 patches a logic error in kill_kprobe so that ftrace-backed probes are properly disarmed before a probe is marked gone, preventing ftrace from referencing invalid probe...
  2. Linux Kernel CVE-2025-40042: Race in kprobe Init Triggers Kernel Oops

    A newly published Linux-kernel vulnerability, tracked as CVE-2025-40042, fixes a race condition in kprobe initialization that can lead to a NULL-pointer dereference and a kernel crash — a local, availability-focused defect that has been upstreamed into the kernel stable trees and is being...