{"api_version":"1","generated_at":"2026-07-20T14:43:25+00:00","cve":"CVE-2026-64163","urls":{"html":"https://cve.report/CVE-2026-64163","api":"https://cve.report/api/cve/CVE-2026-64163.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2026-64163","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-64163"},"summary":{"title":"test_kprobes: clear kprobes between test runs","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n   # Totals: pass:5 fail:0 skip:0 total:5\n   ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n  # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n  Expected 0 == register_kprobe(&kp), but\n      register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n  Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).","state":"PUBLISHED","assigner":"Linux","published_at":"2026-07-19 16:17:58","updated_at":"2026-07-19 16:17:58"},"problem_types":[],"metrics":[],"references":[{"url":"https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9","name":"https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd","name":"https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae","name":"https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399","name":"https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb","name":"https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb","refsource":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","tags":[],"title":"","mime":"","httpstatus":"","archivestatus":"0"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-64163","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-64163","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e44e81c5b90f698025eadceb7eef8661eda117d5 08d355936fcf70c81c94f9fe7310450b65c53399 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e44e81c5b90f698025eadceb7eef8661eda117d5 accc0004c501a9918313142282b094d408af06fb git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e44e81c5b90f698025eadceb7eef8661eda117d5 1c24cf1fd67f6702c719ab73499392cb7af956ae git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e44e81c5b90f698025eadceb7eef8661eda117d5 96515819d79f356f40da5540968d838ea570fab9 git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected e44e81c5b90f698025eadceb7eef8661eda117d5 ef5581bb30efb939cc2bf093475c6cc85258e5cd git","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"affected 5.16","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 5.16 semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.6.142 6.6.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.12.92 6.12.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 6.18.34 6.18.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.0.11 7.0.* semver","platforms":[]},{"source":"CNA","vendor":"Linux","product":"Linux","version":"unaffected 7.1 * original_commit_for_fix","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["lib/tests/test_kprobes.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"08d355936fcf70c81c94f9fe7310450b65c53399","status":"affected","version":"e44e81c5b90f698025eadceb7eef8661eda117d5","versionType":"git"},{"lessThan":"accc0004c501a9918313142282b094d408af06fb","status":"affected","version":"e44e81c5b90f698025eadceb7eef8661eda117d5","versionType":"git"},{"lessThan":"1c24cf1fd67f6702c719ab73499392cb7af956ae","status":"affected","version":"e44e81c5b90f698025eadceb7eef8661eda117d5","versionType":"git"},{"lessThan":"96515819d79f356f40da5540968d838ea570fab9","status":"affected","version":"e44e81c5b90f698025eadceb7eef8661eda117d5","versionType":"git"},{"lessThan":"ef5581bb30efb939cc2bf093475c6cc85258e5cd","status":"affected","version":"e44e81c5b90f698025eadceb7eef8661eda117d5","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["lib/tests/test_kprobes.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.16"},{"lessThan":"5.16","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.142","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.92","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.34","versionType":"semver"},{"lessThanOrEqual":"7.0.*","status":"unaffected","version":"7.0.11","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.142","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.92","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.34","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.0.11","versionStartIncluding":"5.16","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.1","versionStartIncluding":"5.16","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n   # Totals: pass:5 fail:0 skip:0 total:5\n   ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n  # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n  Expected 0 == register_kprobe(&kp), but\n      register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n  Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun)."}],"providerMetadata":{"dateUpdated":"2026-07-19T15:40:49.172Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399"},{"url":"https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb"},{"url":"https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae"},{"url":"https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9"},{"url":"https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd"}],"title":"test_kprobes: clear kprobes between test runs","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-64163","datePublished":"2026-07-19T15:40:49.172Z","dateReserved":"2026-07-19T07:54:57.038Z","dateUpdated":"2026-07-19T15:40:49.172Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"nvd":{"publishedDate":"2026-07-19 16:17:58","lastModifiedDate":"2026-07-19 16:17:58","problem_types":[],"metrics":[],"configurations":[]},"legacy_mitre":{"record":{"CveYear":"2026","CveId":"64163","Ordinal":"1","Title":"test_kprobes: clear kprobes between test runs","CVE":"CVE-2026-64163","Year":"2026"},"notes":[{"CveYear":"2026","CveId":"64163","Ordinal":"1","NoteData":"In the Linux kernel, the following vulnerability has been resolved:\n\ntest_kprobes: clear kprobes between test runs\n\nRunning the kprobes sanity tests twice makes all tests fail and\neventually crashes the kernel.\n\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n   # Totals: pass:5 fail:0 skip:0 total:5\n   ok 1 kprobes_test\n[root@martin-riscv-1 ~]# echo 1 > /sys/kernel/debug/kunit/kprobes_test/run\n...\n  # test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64\n  Expected 0 == register_kprobe(&kp), but\n      register_kprobe(&kp) == -22 (0xffffffffffffffea)\n...\n  Unable to handle kernel paging request ...\n\nThe testsuite defines several kprobes and kretprobes as static variables\nthat are preserved across test runs.\n\nAfter register_kprobe and unregister_kprobe, a kprobe contains some\nleftover data that must be cleared before the kprobe can be registered\nagain. The tests are setting symbol_name to define the probe location.\nAddress and flags must be cleared.\n\nThe existing code clears some of the probes between subsequent tests, but\nnot between two test runs. The leftover data from a previous test run\nmakes the registrations fail in the next run.\n\nMove the cleanups for all kprobes into kprobes_test_init, this function\nis called before each single test (including the first test of a test\nrun).","Type":"Description","Title":"test_kprobes: clear kprobes between test runs"}]}}}