Linux Kernel Eprobe NULL Pointer Dereference Vulnerability

A race condition vulnerability has been identified in the Linux kernel's tracing subsystem. The issue arises because the event trigger flag for eprobes is set after the eprobe is enabled, creating a race where the eprobe can be activated before the event has properly initialized. This premature activation can lead to the eprobe dereferencing a NULL record, causing a NULL pointer dereference bug in the kernel.

Impact

Exploitation of this vulnerability leads to a NULL pointer dereference, causing a kernel crash.

Remediation

The vulnerability has been fixed in the Linux kernel. Users should upgrade to the latest version.