CVE-2022-50266

kprobes: Fix check for probe enabled in kill_kprobe()

published September 15, 2025

CVSS
—
EPSS
0%
Percentile
4.5
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

kprobes: Fix check for probe enabled in kill_kprobe()

In kill_kprobe(), the check whether disarm_kprobe_ftrace() needs to be

called always fails. This is because before that we set the

KPROBE_FLAG_GONE flag for kprobe so that "!kprobe_disabled(p)" is always

false.

The disarm_kprobe_ftrace() call introduced by commit:

0cb2f1372baa ("kprobes: Fix NULL pointer dereference at kprobe_ftrace_handler")

to fix the NULL pointer reference problem. When the probe is enabled, if

we do not disarm it, this problem still exists.

Fix it by putting the probe enabled check before setting the

KPROBE_FLAG_GONE flag.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00157 · 4.5th percentile
Published
2025-09-15T14:21Z
EPSS history
Timeline
  • 15 SEP 14:21Z
    kprobes: Fix check for probe enabled in kill_kprobe()
    cvelistv5