Impact
The Linux kernel contains a fault in the kprobe subsystem where writing the value 0 to the /proc/sys/debug/kprobes-optimization sysctl while a kprobe remains jump‑optimized causes the writer to block in a D state indefinitely. The kernel waiting thread never signals completion, leading to a permanent hang of the process and blocking all subsequent reads or writes to the same sysctl. This results in a system‑wide deadlock that can render the machine unresponsive to ordinary operations that rely on kprobe optimization.
Affected Systems
The affected platform is any Linux kernel that enables kprobe optimization (CONFIG_KPROBES and the optimization interface). The exact kernel versions are not listed, but the vulnerability exists in any build that predates the commit referenced in the advisory (5bfa9f1a9dcb6ecb607adbc1c0226605c972935b). Systems that use automated kprobe instrumentation or custom module probes should verify whether their kernel predates this patch.
Risk and Exploitability
The flaw can be exploited by a privileged local user to trigger a kernel deadlock, effectively causing a Denial of Service. EPSS data is not available, and the CVE is not listed in the CISA KEV catalog, so exploitation likelihood is unquantified. Nevertheless, the impact is significant: a single write to the sysctl while optimization is active can freeze the entire system. Immediate remediation via patching is strongly recommended to avoid this critical state.
OpenCVE Enrichment