SB2026102436 - Improper handling of exceptional conditions in Linux kernel kernel probes

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB2026102436

SB2026102436 - Improper handling of exceptional conditions in Linux kernel kernel probes

Published: October 24, 2026

Security Bulletin ID SB2026102436
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Local access
Highest impact Denial of service

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Improper handling of exceptional conditions (CVE-ID: CVE-2026-98888)

CWE-ID: CWE-755 - Improper Handling of Exceptional Conditions

CVSSv4: 5.7 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]


The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper handling of nested probe state in the Linux kernel arm64 kprobes implementation when a probe is hit while another probe is preparing or executing its out-of-line single-step instruction. A local user can trigger this condition through execution paths involving configured probes to cause a denial of service, as recoverable reentry is treated as unrecoverable and nested probes can overwrite the outer probe's saved interrupt state, leaving interrupts permanently disabled.


Remediation

Install update from vendor's website.

References