CVE-2026-98888
Description
A flaw was found in the Linux kernel's arm64 kprobes subsystem. When tracing or performance monitoring tools trigger a secondary probe while an initial probe is executing its single-step instruction, the kernel treats the event as unrecoverable and corrupts interrupt state tracking. A local user with administrative or tracing privileges can exploit this vulnerability to leave hardware interrupts permanently disabled, resulting in a system freeze and a Denial of Service (DoS).
Détails du score du système commun d'évaluation des vulnérabilités (CVSS)
Info alert:Important note
CVSS scores for open source components depend on vendor-specific factors (e.g. version or build chain). Therefore, Red Hat's score and impact rating can be different from NVD and other vendors. Red Hat remains the authoritative CVE Naming Authority (CNA) source for its products and services (see Red Hat classifications).
Les mesures et les scores CVSS suivants sont préliminaires et sujets à révision.
Répartition des scores CVSS v3
| Red Hat | NVD | cve.org | |
|---|---|---|---|
| Score de base | 4.4 | N/A | N/A |
| Vecteur d'attaque | Local | N/A | N/A |
| Complexité de l'attaque | Low | N/A | N/A |
| Privilèges requis | High | N/A | N/A |
| Interaction avec l'utilisateur | None | N/A | N/A |
| Champ d'application | Unchanged | N/A | N/A |
| Confidentialité | None | N/A | N/A |
| Impact sur l'intégrité | None | N/A | N/A |
| Impact sur la disponibilité | High | N/A | N/A |
Vecteur
Red Hat: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
Comprendre la Défaillance (CWE)
Integrity
Technical Impact: Unexpected State
Exploitation of this weakness can leave the application in an unexpected state and cause variables to be reassigned before the first invocation has completed. This may eventually result in memory corruption or unexpected code execution.
Questions fréquemment posées
Not sure what something means? Check out our Security Glossary.
Vous souhaitez recevoir des notifications d'errata ? Signez ici.
