CVE-2026-80607 - Vulnerability Details - OpenCVE

In the Linux kernel, the following vulnerability has been resolved:

tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg

Sashiko found that user can cause this WARN_ON_ONCE() easily
with adding a kprobe event based on a raw address with BTF
parameter.

Since this is not an unexpected condition, remove the
WARN_ON_ONCE().

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

Vendors	Products
Linux Subscribe	Linux Kernel Subscribe

No data.

No data.

No data.

Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://git.kernel.org/stable/c/251a8fe1b9aedccd298b77bc28426d564c5a923f
https://git.kernel.org/stable/c/8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd
https://git.kernel.org/stable/c/f148f86c65b8f9ef2466ad8506e721749e4957fb

History

Fri, 28 Aug 2026 07:30:00 +0000

Type	Values Removed	Values Added
Description		In the Linux kernel, the following vulnerability has been resolved: tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg Sashiko found that user can cause this WARN_ON_ONCE() easily with adding a kprobe event based on a raw address with BTF parameter. Since this is not an unexpected condition, remove the WARN_ON_ONCE().
Title		tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
First Time appeared		Linux Linux linux Kernel
CPEs		cpe:2.3:o:linux:linux_kernel::::::::
Vendors & Products		Linux Linux linux Kernel
References		https://git.kernel.org/stable/c/251a8fe1b9aedccd298b77bc28426d564c5a923f https://git.kernel.org/stable/c/8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd https://git.kernel.org/stable/c/f148f86c65b8f9ef2466ad8506e721749e4957fb

Projects

Sign in to view the affected projects.

MITRE

Status: PUBLISHED

Assigner: Linux

Published: 2026-08-28T06:48:31.556Z

Updated: 2026-08-28T06:48:31.556Z

Reserved: 2026-08-26T14:34:25.772Z

Link: CVE-2026-80607

Vulnrichment

No data.

NVD

Status : Received

Published: 2026-08-28T08:16:44.677

Modified: 2026-08-28T08:16:44.677

Link: CVE-2026-80607

Redhat

No data.

OpenCVE Enrichment

No data.

Weaknesses

No weakness.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-80607", "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "state": "PUBLISHED", "assignerShortName": "Linux", "dateReserved": "2026-08-26T14:34:25.772Z", "datePublished": "2026-08-28T06:48:31.556Z", "dateUpdated": "2026-08-28T06:48:31.556Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "shortName": "Linux", "dateUpdated": "2026-08-28T06:48:31.556Z"}, "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/probes: Remove WARN_ON_ONCE from parse_btf_arg\n\nSashiko found that user can cause this WARN_ON_ONCE() easily\nwith adding a kprobe event based on a raw address with BTF\nparameter.\n\nSince this is not an unexpected condition, remove the\nWARN_ON_ONCE()."}], "affected": [{"product": "Linux", "vendor": "Linux", "defaultStatus": "unaffected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/trace/trace_probe.c"], "versions": [{"version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "lessThan": "f148f86c65b8f9ef2466ad8506e721749e4957fb", "status": "affected", "versionType": "git"}, {"version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "lessThan": "8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd", "status": "affected", "versionType": "git"}, {"version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "lessThan": "251a8fe1b9aedccd298b77bc28426d564c5a923f", "status": "affected", "versionType": "git"}]}, {"product": "Linux", "vendor": "Linux", "defaultStatus": "affected", "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "programFiles": ["kernel/trace/trace_probe.c"], "versions": [{"version": "6.5", "status": "affected"}, {"version": "0", "lessThan": "6.5", "status": "unaffected", "versionType": "semver"}, {"version": "6.18.40", "lessThanOrEqual": "6.18.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.1.5", "lessThanOrEqual": "7.1.*", "status": "unaffected", "versionType": "semver"}, {"version": "7.2", "lessThanOrEqual": "*", "status": "unaffected", "versionType": "original_commit_for_fix"}]}], "cpeApplicability": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "6.18.40"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.1.5"}, {"vulnerable": true, "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*", "versionStartIncluding": "6.5", "versionEndExcluding": "7.2"}]}]}], "references": [{"url": "https://git.kernel.org/stable/c/f148f86c65b8f9ef2466ad8506e721749e4957fb"}, {"url": "https://git.kernel.org/stable/c/8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd"}, {"url": "https://git.kernel.org/stable/c/251a8fe1b9aedccd298b77bc28426d564c5a923f"}], "title": "tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg", "x_generator": {"engine": "bippy-1.2.0"}}}}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Linux", "programFiles": ["kernel/trace/trace_probe.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"lessThan": "f148f86c65b8f9ef2466ad8506e721749e4957fb", "status": "affected", "version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "versionType": "git"}, {"lessThan": "8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd", "status": "affected", "version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "versionType": "git"}, {"lessThan": "251a8fe1b9aedccd298b77bc28426d564c5a923f", "status": "affected", "version": "b576e09701c7d045bbe5cd85d53e2f34426aa214", "versionType": "git"}]}, {"defaultStatus": "affected", "product": "Linux", "programFiles": ["kernel/trace/trace_probe.c"], "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "versions": [{"status": "affected", "version": "6.5"}, {"lessThan": "6.5", "status": "unaffected", "version": "0", "versionType": "semver"}, {"lessThanOrEqual": "6.18.*", "status": "unaffected", "version": "6.18.40", "versionType": "semver"}, {"lessThanOrEqual": "7.1.*", "status": "unaffected", "version": "7.1.5", "versionType": "semver"}, {"lessThanOrEqual": "*", "status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix"}]}], "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/probes: Remove WARN_ON_ONCE from parse_btf_arg\n\nSashiko found that user can cause this WARN_ON_ONCE() easily\nwith adding a kprobe event based on a raw address with BTF\nparameter.\n\nSince this is not an unexpected condition, remove the\nWARN_ON_ONCE()."}], "id": "CVE-2026-80607", "lastModified": "2026-08-28T08:16:44.677", "metrics": {}, "published": "2026-08-28T08:16:44.677", "references": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/251a8fe1b9aedccd298b77bc28426d564c5a923f"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/8a662d8c05e2cf16f7a047c81bc1eb5d3b29bacd"}, {"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "url": "https://git.kernel.org/stable/c/f148f86c65b8f9ef2466ad8506e721749e4957fb"}], "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "vulnStatus": "Received"}