Linux Kernel Kprobes Single Stepping Vulnerability Leading to Kernel Panic

Vulnerability

A vulnerability in the Linux kernel's kprobes implementation can cause a kernel panic. This issue arises because the kprobes control block (kcb) status flag is not properly updated after single stepping. If another INT3 user is executed immediately after kprobes, the kprobe_int3_handler() may incorrectly interpret the INT3 as kprobe's single stepping INT3, leading to a kernel panic.

Impact

Exploitation of this vulnerability can cause a kernel panic, disrupting system operations and potentially leading to a denial of service.

Added: Jun 18, 2025, 5:29 PM
Updated: Jun 18, 2025, 5:29 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.0
remediation
0.0
relevance
0.2
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.