CVE-2026-80607: tracing/probes: Remove WARN_ON_ONCE from parse_btf_arg
In the Linux kernel, the following vulnerability has been resolved:
tracing/probes: Remove WARNONONCE from parsebtfarg
Sashiko found that user can cause this WARNONONCE() easily with adding a kprobe event based on a raw address with BTF parameter.
Since this is not an unexpected condition, remove the WARNONONCE().
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Remove the WARN_ON_ONCE() from tracing/probes: parse_btf_arg, as it can be triggered easily and is not an unexpected condition.
Linux kernel tracing/probes parse_btf_arg WARN_ON_ONCE parameter = removed
Event History
Frequently Asked Questions
What access does an attacker need to trigger this condition?
The trigger requires the ability to add a kprobe event. The event must be based on a raw address and use a BTF parameter.
What is the practical impact described for affected systems?
A user can easily cause a WARN_ON_ONCE() warning in the kernel. The supplied information describes this as an expected condition rather than an unexpected kernel state.
What is the remediation?
Apply a Linux kernel update containing the change that removes WARN_ON_ONCE() from parse_btf_arg. The provided references identify stable kernel commits carrying the fix.