CVE-2026-53095

In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> bpf: Fix abuse of kprobe_write_ctx via freplace<br /> <br /> uprobe programs are allowed to modify struct pt_regs.<br /> <br /> Since the actual program type of uprobe is KPROBE, it can be abused to<br /> modify struct pt_regs via kprobe+freplace when the kprobe attaches to<br /> kernel functions.<br /> <br /> For example,<br /> <br /> SEC("?kprobe")<br /> int kprobe(struct pt_regs *regs)<br /> {<br /> return 0;<br /> }<br /> <br /> SEC("?freplace")<br /> int freplace_kprobe(struct pt_regs *regs)<br /> {<br /> regs-&gt;di = 0;<br /> return 0;<br /> }<br /> <br /> freplace_kprobe prog will attach to kprobe prog.<br /> kprobe prog will attach to a kernel function.<br /> <br /> Without this patch, when the kernel function runs, its first arg will<br /> always be set as 0 via the freplace_kprobe prog.<br /> <br /> To fix the abuse of kprobe_write_ctx=true via kprobe+freplace, disallow<br /> attaching freplace programs on kprobe programs with different<br /> kprobe_write_ctx values.