PROBE::KPROCESS.EX(3stap) Kernel Process Tapset PROBE::KPROCESS.EX(3stap)

# [NAME](#NAME)

probe::kprocess.exec - Attempt to exec to a new program

# [SYNOPSIS](#SYNOPSIS)

```
probe kprocess.exec {}
```

# [VALUES](#VALUES)

*argstr*

A string containing the filename followed by the arguments to pass, excluding 0th arg (SystemTap v2.5+)

*name*

Name of the system call (“execve”) (SystemTap v2.5+)

*args*

The arguments to pass to the new executable, including the 0th arg (SystemTap v2.5+)

*filename*

The path to the new executable

# [CONTEXT](#CONTEXT)

The caller of exec.

# [DESCRIPTION](#DESCRIPTION)

Fires whenever a process attempts to exec to a new program. Aliased to the syscall.execve probe in SystemTap v2.5+.

# [SEE ALSO0](#SEE_ALSO0)

[*tapset::kprocess*(3stap)](/man/enterprise-packages/systemtap/tapset::kprocess.3stap)

September 2026 SystemTap Tapset Reference Ver

---

Document: probe::kprocess.exec(3stap) from systemtap 5.6-r1 (Chainguard OS)
Source: https://sourceware.org/git/systemtap.git