Linux Distros Unpatched Vulnerability : CVE-2026-31541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix tracemarker copy link list updates When the copytracemarker option is enabled for an instance, anything written into /sys/kernel/tracing/tracemarke...

The vulnerability of the `tracing_err_log_open()` function in the kernel/trace/trace.c module, which supports Linux operating system traceability, allows a malicious actor to cause a service failure.

The vulnerability of the tracingerrlogopen function in the kernel/trace/trace.c module, which supports Linux operating system traceability, is related to the pointer manipulation. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerabilities of the functions test_gen_synth_cmd() and test_empty_synth_event() in the kernel/trace/synth_event_gen_test.c module, which support Linux operating system tracing, allow a malicious actor to cause a service failure.

The vulnerabilities of the functions testgensynthcmd and testemptysynthevent in the kernel/trace/syntheventgentest.c module, which support kernel tracing in Linux operating systems, are related to improper memory release. Exploiting these vulnerabilities could allow an attacker to cause a system...

CVE-2023-54211 tracing: Fix warning in trace_buffered_event_disable()

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix warning in tracebufferedeventdisable Warning happened in tracebufferedeventdisable at WARNONONCE!tracebufferedeventref Call Trace: ? warn+0xa5/0x1b0 ? tracebufferedeventdisable+0x189/0x1b0...

EUVD-2025-32782

In the Linux kernel, the following vulnerability has been resolved: tracing/hist: Fix out-of-bound write on 'actiondata.varrefidx' When generate a synthetic event with many params and then create a trace action for it 1, kernel panic happened 2. It is because that in traceactioncreate...

Linux Distros Unpatched Vulnerability : CVE-2025-39887

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Fix null-ptr-deref in bitmapparselist A crash was observed with the...

CVE-2022-50255 tracing: Fix reading strings from synthetic events

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix reading strings from synthetic events The follow commands caused a crash: cd /sys/kernel/tracing echo 's:open char file' dynamicevents echo 'hist:keys=commonpid:file=filename:onchange$file.traceopen,$file'...

UBUNTU-CVE-2024-57930

In the Linux kernel, the following vulnerability has been resolved: tracing: Have processstring also allow arrays In order to catch a common bug where a TRACEEVENT TPfastassign assigns an address of an allocated string to the ring buffer and then references it in TPprintk, which can be executed...

PT-2026-2886

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.18.0-ftest-11964-ge022764176fc-dirty 323 Description The Linux kernel contained an issue where unsupported perf events could be registered with synthetic events. This resulted in a warning message and a potenti...

Low: bpftrace security update

BPFtrace is a high-level tracing language for Linux enhanced Berkeley Packet Filter eBPF available in recent Linux kernels 4.x. BPFtrace uses LLVM as a backend to compile scripts to BPF-bytecode and makes use of BCC for interacting with the Linux BPF system, as well as existing Linux tracing...

USN-5094-1: Linux kernel vulnerabilities

It was discovered that the KVM hypervisor implementation in the Linux kernel did not properly perform reference counting in some situations, leading to a use-after-free vulnerability. An attacker who could start and control a VM could possibly use this to expose sensitive information or execute...