Astra Linux – Vulnerability found in Linux 5.10, Linux 5.15

In the Linux kernel, the following vulnerabilities have been resolved: Tracing: kprobe: Fixed a memory leak in testgenkprobe/kretprobecmd. testgenkprobecmd only frees the buffer in the “fail path”; therefore, the buffer may leak when there is no failure. Move the kfreebuf call from the “fail path...

SUSE CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: RISC-V: probes: save the original sp in rethook trampoline Reading a word from the stack in a kretprobe causes a crash in the RISC-V kernel. bash $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1...

CVE-2026-72028

A flaw was found in the Linux kernel's kretprobe kernel return probe functionality on RISC-V architectures. A local attacker can trigger a kernel crash by attempting to read from the stack within a kretprobe. This occurs because the archrethooktrampoline does not correctly save the original stack...

CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

UBUNTU-CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72028

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72028 riscv: probes: save original sp in rethook trampoline

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

EUVD-2026-58986

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72028

CVE-2026-72028 – Linux kernel (riscv) Root cause: In the riscv rethook trampoline path used by kprobes/kretprobe, the original stack pointer (sp) was not saved. The trampoline decremented sp for its local stack and did not preserve the original sp value when saving registers in struct pt_regs, le...

CVE-2026-72028 riscv: probes: save original sp in rethook trampoline

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

CVE-2026-72028: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r nttywrite $stack0' dynamicevents $ echo 1 events/kprobes/enable Unabl...

PT-2026-72217

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A crash occurs in the RISC-V kernel when reading a word from the stack during a kretprobe. This happens because the arch rethook trampoline function fails to save the stack pointer sp in...

Linux Distros Unpatched Vulnerability : CVE-2026-72028

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - riscv: probes: save original sp in rethook trampoline Reading a word from the stack in a kretprobe crashes a risc-v kernel. $ cd /sys/kernel/tracing/ $ echo 'r...

Linux Kernel DoS

The vulnerability of the testgenkprobe/kretprobecmd and testgenkprobecmd functions in the Linux operating system is related to the lack of memory release after the effective lifespan of these functions has ended. Exploiting this vulnerability can allow an attacker to cause a service failure...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-993139)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-993139 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix potential null-ptr-deref on tracearray in kprobeeventgentestexit When...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-989049)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989049 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd testgenkprobecmd only free buf in...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-986777)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-986777 advisory. In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd testgenkprobecmd only free buf in...

EUVD-2025-12898

Malicious code in bioql PyPI...

SUSE CVE-2022-49891

In the Linux kernel, the following vulnerability has been resolved: tracing: kprobe: Fix memory leak in testgenkprobe/kretprobecmd testgenkprobecmd only free buf in fail path, hence buf will leak when there is no failure. Move kfreebuf from fail path to common path to prevent the memleak. The sam...