<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://db.gcve.eu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 12 Nov 2026 08:06:25 +0000</lastBuildDate>
    <item>
      <title>certfr-2026-avi-1469 — De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Certaines d'entre elles permettent à un a…</title>
      <link>https://db.gcve.eu/vuln/certfr-2026-avi-1469</link>
      <description>certfr-2026-avi-1469</description>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/certfr-2026-avi-1469</guid>
    </item>
    <item>
      <title>fkie_cve-2026-98530</title>
      <link>https://db.gcve.eu/vuln/fkie_cve-2026-98530</link>
      <description>&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;kprobes: Fix permanent hang when flushing the kprobe optimizer&lt;/p&gt;
&lt;p&gt;Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is
jump-optimized never returns. The writer sleeps in D state forever with
kprobe_sysctl_mutex held, so any later read or write of that sysctl
hangs as well. For example, with vfs_read+9 as an optimizable address
in this build:&lt;/p&gt;
&lt;p&gt;# cd /sys/kernel/tracing
  # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events
  # echo 1 &amp;gt; events/kprobes/myprobe/enable
  # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]
  # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization&lt;/p&gt;
&lt;p&gt;INFO: task sh:246 blocked for more than 10 seconds.
  Call Trace:
   &amp;lt;TASK&amp;gt;
   __schedule+0x1176/0x4f70
   schedule+0xdc/0x2c0
   schedule_timeout+0x17b/0x260
   wait_for_completion+0x173/0x3c0
   wait_for_kprobe_optimizer_locked+0xbc/0x130
   proc_kprobes_optimization_handler+0x156/0x1b0
   proc_sys_call_handler+0x324/0x490
   vfs_write+0x52d/0xfe0
   ksys_write+0xff/0x200
   do_syscall_64+0x106/0x630
   entry_SYSCALL_64_after_hwframe+0x77/0x7f
   &amp;lt;/TASK&amp;gt;
  ...
  INFO: task cat:265 is blocked on a mutex likely owned by task sh:246.&lt;/p&gt;
&lt;p&gt;wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion,
asks the optimizer thread to flush and sleeps in wait_for_completion().
The thread drains the (un)optimizing lists, but calls complete() only
if completion_done() is true, i.e. if the completion is already done,
which never…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;kprobes: Fix permanent hang when flushing the kprobe optimizer&lt;/p&gt;
&lt;p&gt;Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is
jump-optimized never returns. The writer sleeps in D state forever with
kprobe_sysctl_mutex held, so any later read or write of that sysctl
hangs as well. For example, with vfs_read+9 as an optimizable address
in this build:&lt;/p&gt;
&lt;p&gt;# cd /sys/kernel/tracing
  # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events
  # echo 1 &amp;gt; events/kprobes/myprobe/enable
  # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]
  # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization&lt;/p&gt;
&lt;p&gt;INFO: task sh:246 blocked for more than 10 seconds.
  Call Trace:
   &amp;lt;TASK&amp;gt;
   __schedule+0x1176/0x4f70
   schedule+0xdc/0x2c0
   schedule_timeout+0x17b/0x260
   wait_for_completion+0x173/0x3c0
   wait_for_kprobe_optimizer_locked+0xbc/0x130
   proc_kprobes_optimization_handler+0x156/0x1b0
   proc_sys_call_handler+0x324/0x490
   vfs_write+0x52d/0xfe0
   ksys_write+0xff/0x200
   do_syscall_64+0x106/0x630
   entry_SYSCALL_64_after_hwframe+0x77/0x7f
   &amp;lt;/TASK&amp;gt;
  ...
  INFO: task cat:265 is blocked on a mutex likely owned by task sh:246.&lt;/p&gt;
&lt;p&gt;wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion,
asks the optimizer thread to flush and sleeps in wait_for_completion().
The thread drains the (un)optimizing lists, but calls complete() only
if completion_done() is true, i.e. if the completion is already done,
which never…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/fkie_cve-2026-98530</guid>
    </item>
    <item>
      <title>GHSA-2p4m-w3h2-4q6g</title>
      <link>https://db.gcve.eu/vuln/ghsa-2p4m-w3h2-4q6g</link>
      <description>&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;kprobes: Fix permanent hang when flushing the kprobe optimizer&lt;/p&gt;
&lt;p&gt;Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is
jump-optimized never returns. The writer sleeps in D state forever with
kprobe_sysctl_mutex held, so any later read or write of that sysctl
hangs as well. For example, with vfs_read+9 as an optimizable address
in this build:&lt;/p&gt;
&lt;p&gt;# cd /sys/kernel/tracing
  # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events
  # echo 1 &amp;gt; events/kprobes/myprobe/enable
  # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]
  # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization&lt;/p&gt;
&lt;p&gt;INFO: task sh:246 blocked for more than 10 seconds.
  Call Trace:
   &amp;lt;TASK&amp;gt;
   __schedule+0x1176/0x4f70
   schedule+0xdc/0x2c0
   schedule_timeout+0x17b/0x260
   wait_for_completion+0x173/0x3c0
   wait_for_kprobe_optimizer_locked+0xbc/0x130
   proc_kprobes_optimization_handler+0x156/0x1b0
   proc_sys_call_handler+0x324/0x490
   vfs_write+0x52d/0xfe0
   ksys_write+0xff/0x200
   do_syscall_64+0x106/0x630
   entry_SYSCALL_64_after_hwframe+0x77/0x7f
   &amp;lt;/TASK&amp;gt;
  ...
  INFO: task cat:265 is blocked on a mutex likely owned by task sh:246.&lt;/p&gt;
&lt;p&gt;wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion,
asks the optimizer thread to flush and sleeps in wait_for_completion().
The thread drains the (un)optimizing lists, but calls complete() only
if completion_done() is true, i.e. if the completion is already done,
which never…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;kprobes: Fix permanent hang when flushing the kprobe optimizer&lt;/p&gt;
&lt;p&gt;Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is
jump-optimized never returns. The writer sleeps in D state forever with
kprobe_sysctl_mutex held, so any later read or write of that sysctl
hangs as well. For example, with vfs_read+9 as an optimizable address
in this build:&lt;/p&gt;
&lt;p&gt;# cd /sys/kernel/tracing
  # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events
  # echo 1 &amp;gt; events/kprobes/myprobe/enable
  # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]
  # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization&lt;/p&gt;
&lt;p&gt;INFO: task sh:246 blocked for more than 10 seconds.
  Call Trace:
   &amp;lt;TASK&amp;gt;
   __schedule+0x1176/0x4f70
   schedule+0xdc/0x2c0
   schedule_timeout+0x17b/0x260
   wait_for_completion+0x173/0x3c0
   wait_for_kprobe_optimizer_locked+0xbc/0x130
   proc_kprobes_optimization_handler+0x156/0x1b0
   proc_sys_call_handler+0x324/0x490
   vfs_write+0x52d/0xfe0
   ksys_write+0xff/0x200
   do_syscall_64+0x106/0x630
   entry_SYSCALL_64_after_hwframe+0x77/0x7f
   &amp;lt;/TASK&amp;gt;
  ...
  INFO: task cat:265 is blocked on a mutex likely owned by task sh:246.&lt;/p&gt;
&lt;p&gt;wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion,
asks the optimizer thread to flush and sleeps in wait_for_completion().
The thread drains the (un)optimizing lists, but calls complete() only
if completion_done() is true, i.e. if the completion is already done,
which never…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ghsa-2p4m-w3h2-4q6g</guid>
    </item>
    <item>
      <title>UBUNTU-CVE-2026-98530</title>
      <link>https://db.gcve.eu/vuln/ubuntu-cve-2026-98530</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 119 more&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix permanent hang when flushing the kprobe optimizer Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is jump-optimized never returns. The writer sleeps in D state forever with kprobe_sysctl_mutex held, so any later read or write of that sysctl hangs as well. For example, with vfs_read+9 as an optimizable address in this build:   # cd /sys/kernel/tracing   # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events   # echo 1 &amp;gt; events/kprobes/myprobe/enable   # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]   # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization   INFO: task sh:246 blocked for more than 10 seconds.   Call Trace:    &amp;lt;TASK&amp;gt;    __schedule+0x1176/0x4f70    schedule+0xdc/0x2c0    schedule_timeout+0x17b/0x260    wait_for_completion+0x173/0x3c0    wait_for_kprobe_optimizer_locked+0xbc/0x130    proc_kprobes_optimization_handler+0x156/0x1b0    proc_sys_call_handler+0x324/0x490    vfs_write+0x52d/0xfe0    ksys_write+0xff/0x200    do_syscall_64+0x106/0x630    entry_SYSCALL_64_after_hwframe+0x77/0x7f    &amp;lt;/TASK&amp;gt;   ...   INFO: task cat:265 is blocked on a mutex likely owned by task sh:246. wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion, asks the optimizer thread to flush and sleeps in wait_for_completion(). The thread drains the (un)optimizing lists, but calls complete() only if completion_done() is true, i.e. if the completion is already done, which never happ…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Ubuntu:16.04:LTS: linux-hwe-edge, Ubuntu:18.04:LTS: linux-aws-5.0, Ubuntu:18.04:LTS: linux-aws-5.3, Ubuntu:18.04:LTS: linux-azure, Ubuntu:18.04:LTS: linux-azure-5.3, Ubuntu:18.04:LTS: linux-azure-edge, Ubuntu:18.04:LTS: linux-gcp, Ubuntu:18.04:LTS: linux-gcp-5.3, Ubuntu:18.04:LTS: linux-gke-4.15, Ubuntu:18.04:LTS: linux-gke-5.4 and 119 more&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved: kprobes: Fix permanent hang when flushing the kprobe optimizer Writing 0 to /proc/sys/debug/kprobes-optimization while a kprobe is jump-optimized never returns. The writer sleeps in D state forever with kprobe_sysctl_mutex held, so any later read or write of that sysctl hangs as well. For example, with vfs_read+9 as an optimizable address in this build:   # cd /sys/kernel/tracing   # echo &amp;#39;p:myprobe vfs_read+9&amp;#39; &amp;gt;&amp;gt; kprobe_events   # echo 1 &amp;gt; events/kprobes/myprobe/enable   # # wait until /sys/kernel/debug/kprobes/list shows [OPTIMIZED]   # echo 0 &amp;gt; /proc/sys/debug/kprobes-optimization   INFO: task sh:246 blocked for more than 10 seconds.   Call Trace:    &amp;lt;TASK&amp;gt;    __schedule+0x1176/0x4f70    schedule+0xdc/0x2c0    schedule_timeout+0x17b/0x260    wait_for_completion+0x173/0x3c0    wait_for_kprobe_optimizer_locked+0xbc/0x130    proc_kprobes_optimization_handler+0x156/0x1b0    proc_sys_call_handler+0x324/0x490    vfs_write+0x52d/0xfe0    ksys_write+0xff/0x200    do_syscall_64+0x106/0x630    entry_SYSCALL_64_after_hwframe+0x77/0x7f    &amp;lt;/TASK&amp;gt;   ...   INFO: task cat:265 is blocked on a mutex likely owned by task sh:246. wait_for_kprobe_optimizer_locked() reinitializes optimizer_completion, asks the optimizer thread to flush and sleeps in wait_for_completion(). The thread drains the (un)optimizing lists, but calls complete() only if completion_done() is true, i.e. if the completion is already done, which never happ…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://db.gcve.eu/vuln/ubuntu-cve-2026-98530</guid>
    </item>
  </channel>
</rss>
