Linux Kernel Event Probes NULL Pointer Dereference Vulnerability

Vulnerability

A vulnerability in the Linux kernel's event probing system can lead to a NULL pointer dereference crash. This issue arises when an event probe (eprobes) attempts to use a symbol reference, which is not properly handled, causing a crash. Inconsistencies exist between event probes and other probing mechanisms, kprobes and uprobes, which can reference additional data beyond main registers, such as immediate addresses, symbols, and task names. The vulnerability affects event probes by not allowing them to reference the same data as kprobes and uprobes, leading to potential crashes when certain symbols are used.

Impact

Exploitation of this vulnerability causes a NULL pointer dereference, leading to a crash of the affected system or application.

Added: Jun 18, 2025, 6:10 PM
Updated: Jun 18, 2025, 6:10 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.