In the Linux kernel, the unregister_fprobe() routine failed to wait for the RCU grace period before freeing the probe structure. This omission can cause the kernel to free a probe while it is still being referenced, resulting in a classic use‑after‑free condition that may corrupt kernel memory or trigger a crash. The problem can surface during normal fprobe events or when a custom module registers and immediately unregisters a probe.

All Linux kernel releases that have not incorporated the RCU wait fix contained in commit 4346ba1604093 are affected. The vulnerability impacts the fprobe mechanism used by the function‑graph tracer and by BPF kprobe multi links. Systems that deploy custom kernel modules that perform dynamic fprobe registration are also potentially exposed.

The EPSS score is less than 1 %, indicating a low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. Exploitation would require local kernel code manipulation, typically a malicious module or privileged user, as no remote exploitation pathway is described. The CVSS score is not provided, but the inherent severity is high because successful use‑after‑free can lead to privilege escalation or denial of service.