What is the CVSS score of EUVD-2026-45848?

EUVD-2026-45848 has a CVSS 3.1 base score of 5.5 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.2%.

Is there a patch available for EUVD-2026-45848?

Yes, a patch is available for EUVD-2026-45848. Update the affected software to the latest version immediately.

Linux Kernel EUVD-2026-45848

| CVE-2026-64163 MEDIUM

2026-07-19 Linux

GHSA-9292-g249-69fp

Denial Of Service Linux

5.5

CVSS 3.1 · NVD

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Gain local shell access
Delivery

Verify debugfs is mounted with kunit path
Exploit

Write '1' to kprobes_test/run (first test run)
Execution

Write '1' again to kprobes_test/run (second run triggers stale struct)
Persist

Kernel paging fault
Impact

System crash (DoS)

Vulnerability Assessment

Exploitation Conditions	Exploitation requires: (1) local, interactive access to the target system; (2) low-privilege write access to /sys/kernel/debug/kunit/kprobes_test/run, which is only accessible via debugfs - typically mounted by root but readable/writable depending on kernel configuration and mount options; (3) the kernel must be compiled with CONFIG_KUNIT=y and the kprobes KUnit test module included, which is non-default in production distributions and typical only of development, CI, or debug kernel builds. Exploitation is limited to denial-of-service (kernel crash/reboot) with no confidentiality or integrity impact. The attack cannot be performed remotely; physical or SSH session access to the host is required. Production kernels from major distributions (RHEL, Debian stable, Ubuntu LTS with hardened configs) are unlikely to expose this path.
Impact	Real-world risk is limited. The CVSS vector AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H correctly identifies this as a local denial-of-service requiring low-privilege access - an authenticated local user who can write to /sys/kernel/debug/kunit/kprobes_test/run. However, this debugfs path is only exposed when the kernel is compiled with KUnit support and the kprobes test module, conditions that are non-default in production kernels and typical of development or CI/testing environments. EPSS at 0.16% (6th percentile) corroborates that exploitation probability is very low, and the vulnerability is absent from CISA KEV. No conflicting signals between data sources are observed - all intelligence consistently points to a low-exploitation-likelihood, local-only, testing-environment vulnerability. The availability impact (A:H) is accurate given that successful triggering crashes the entire kernel, but the preconditions substantially limit real-world exposure.
Exploit ScenarioDerived	A local user with write access to /sys/kernel/debug/kunit/kprobes_test/run on a kernel compiled with KUnit and the kprobes test module executes 'echo 1 > /sys/kernel/debug/kunit/kprobes_test/run' twice in succession. The second invocation fails to re-register kprobes due to stale static struct data, triggering a kernel paging fault and crashing the system. No exploit code beyond basic shell commands is required; the kernel's own test infrastructure is the mechanism.

This Month Plan within 30 days. Why: MEDIUM severity (CVSS 4.0-6.9).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Aug 13, 2026

Kernel panic in the Linux kernel's kprobes self-test module (test_kprobes) allows a local attacker or privileged user with debugfs write access to crash the kernel by triggering the KUnit kprobes test suite twice in succession. The root cause is that static kprobe and kretprobe variables retain stale address and flag data after unregister_kprobe, causing re-registration to fail with -EINVAL and subsequently triggering a kernel paging fault on the second test run. No public exploit is identified at time of analysis; EPSS at the 6th percentile and absence from CISA KEV confirm this as low-priority in production contexts.

RemediationAI

Upgrade to a patched Linux kernel version: 6.6.142, 6.12.92, 6.18.34, 7.0.11, or 7.1, as documented in EUVD-2026-45848 and the upstream stable commits at https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399 and associated commits. Ubuntu users should apply the update referenced in USN-8593-1 at https://ubuntu.com/security/notices/USN-8593-1. As a compensating control where patching is not immediately possible, disable or restrict write access to /sys/kernel/debug/kunit/kprobes_test/run via filesystem permissions or by not mounting debugfs on affected hosts; trade-off is loss of KUnit test execution capability. Alternatively, ensure that CONFIG_KUNIT and the kprobes test module are not compiled into production kernels, which is already best practice for hardened deployments - this eliminates the attack surface entirely with no functional trade-off in non-testing environments.

Affected VersionsENISA

Linux patch: 6.12.92

Linux e44e81c5b90f698025eadceb7eef8661eda117d5 <08d355936fcf70c81c94f9fe7310450b65c53399

Linux patch: 0

Linux patch: 6.18.34

Linux patch: 7.1

Linux e44e81c5b90f698025eadceb7eef8661eda117d5 <ef5581bb30efb939cc2bf093475c6cc85258e5cd

Linux e44e81c5b90f698025eadceb7eef8661eda117d5 <96515819d79f356f40da5540968d838ea570fab9

Linux e44e81c5b90f698025eadceb7eef8661eda117d5 <1c24cf1fd67f6702c719ab73499392cb7af956ae

Linux 5.16

Linux e44e81c5b90f698025eadceb7eef8661eda117d5 <accc0004c501a9918313142282b094d408af06fb

Linux patch: 7.0.11

Linux patch: 6.6.142

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

The vulnerability resides in lib/tests/test_kprobes.c, a KUnit-based self-test module for the Linux kernel's kprobes dynamic instrumentation subsystem. Kprobes allows inserting breakpoints into running kernel code for debugging; kretprobes additionally intercept function return values. The module declares several kprobe and kretprobe structs as static variables. After a call sequence of register_kprobe followed by unregister_kprobe, internal kernel fields - specifically the resolved address and state flags - are not zeroed, leaving the struct in a state incompatible with re-registration. The test initializer (kprobes_test_init) was not performing full cleanup of all probe structs, only partial cleanup between sub-tests within a single run. On a second run, register_kprobe encounters non-null stale addresses and rejects registration with -EINVAL (-22), and subsequent access to uninitialized pointers triggers a kernel paging fault (NULL/stale pointer dereference). CPE data (cpe:2.3:a:linux:linux) confirms the affected product as the upstream Linux kernel, introduced at commit e44e81c5b90f698025eadceb7eef8661eda117d5, corresponding to Linux 5.16.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

NVD PRIMARY 5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

vuln.today AI 5.5 MEDIUM

Local vector confirmed by debugfs write requirement; PR:L because any user with debugfs write access can trigger it; A:H for kernel panic; no C or I impact.

3.1 AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

SUSE 4.4 MEDIUM

AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Red Hat 5.5 LOW

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

CVSS changed

Aug 13, 2026 - 15:37 NVD

5.5 (MEDIUM)

Patch available

Jul 19, 2026 - 17:03 EUVD

CVE Published

Jul 19, 2026 - 15:40 cve.org

UNKNOWN (no severity yet)

CVE Published

Jul 19, 2026 - 15:40 nvd

MEDIUM 5.5

DescriptionNVD

In the Linux kernel, the following vulnerability has been resolved:

test_kprobes: clear kprobes between test runs

Running the kprobes sanity tests twice makes all tests fail and eventually crashes the kernel.

[root@martin-riscv-1 ~]

echo 1 > /sys/kernel/debug/kunit/kprobes_test/run

...

Totals: pass:5 fail:0 skip:0 total:5

ok 1 kprobes_test [root@martin-riscv-1 ~]

echo 1 > /sys/kernel/debug/kunit/kprobes_test/run

...

test_kprobe: EXPECTATION FAILED at lib/tests/test_kprobes.c:64

Expected 0 register_kprobe(&kp), but register_kprobe(&kp) -22 (0xffffffffffffffea) ... Unable to handle kernel paging request ...

The testsuite defines several kprobes and kretprobes as static variables that are preserved across test runs.

After register_kprobe and unregister_kprobe, a kprobe contains some leftover data that must be cleared before the kprobe can be registered again. The tests are setting symbol_name to define the probe location. Address and flags must be cleared.

The existing code clears some of the probes between subsequent tests, but not between two test runs. The leftover data from a previous test run makes the registrations fail in the next run.

Move the cleanups for all kprobes into kprobes_test_init, this function is called before each single test (including the first test of a test run).

Threat Intelligence Overview

EPSS Score

0.2%

Top 94% exploitable

Prevalence

Low

only affects debug/development kernels with KUnit compiled in

Data Quality

6 sources

Confidence: High

EUVD

NVD

CVE.org

EPSS Vendor

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity MEDIUM

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

MEDIUM severity (CVSS 4.0-6.9)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Defer

Exploitation· derived

None

System Exposure· derived

Small

Automatable· derived

Human Impact· derived

Medium

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +28

PoC: 0

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Attack Technique

Denial of Service MEDIUM

Denial of Service attacks render applications or systems unavailable by overwhelming resources or triggering failure conditions.

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2011-0611 HIGH POC

8.8

CVE-2012-1889 HIGH POC

8.8

CVE-2012-0507 CRITICAL POC

9.8

CVE-2014-1761 HIGH POC

7.8

CVE-2015-5122 CRITICAL POC

9.8

CVE-2011-0609 HIGH POC

7.8

Vendor StatusVendor

SUSE

Severity: Moderate

Product	Status
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise Desktop 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 15 SP7	Not-Affected
SUSE Linux Enterprise High Availability Extension 16.0	Not-Affected

References

Advisories & patches

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2026-64163 ADVISORY https://seclists.org/oss-sec/2026/q3/230 ADVISORY https://ubuntu.com/security/notices/USN-8593-1 ADVISORY https://vuldb.com/vuln/380300 REF https://git.kernel.org/stable/c/08d355936fcf70c81c94f9fe7310450b65c53399 REF https://git.kernel.org/stable/c/1c24cf1fd67f6702c719ab73499392cb7af956ae REF https://git.kernel.org/stable/c/29ec976006dfab171a7e007976e38af56ce286e4 REF https://git.kernel.org/stable/c/96515819d79f356f40da5540968d838ea570fab9 REF https://git.kernel.org/stable/c/accc0004c501a9918313142282b094d408af06fb REF https://git.kernel.org/stable/c/ef5581bb30efb939cc2bf093475c6cc85258e5cd

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back