CVE-2026-97936

A flaw was found in the Linux kernel's tracing subsystem. A local user with permissions to configure event triggers could cause a Denial of Service DoS or memory corruption by applying a stacktrace modifier to an unsupported field. Because the kernel fails to validate the field type, it performs ...

CVE-2026-97935

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to configure event triggers can trigger a use-after-free condition, leading to a system crash, Denial of Service DoS, or potential privilege escalation. This issue occurs when registering a named histogram trigger...

CVE-2026-97934

A flaw was found in the Linux kernel. An unbounded memory copy vulnerability exists in the tracing subsystem when processing event histogram keys like STACKTRACE due to improper field pointer handling. A local user with access to the kernel tracing interface can exploit this flaw by setting a...

CVE-2026-97933

A flaw was found in the Linux kernel's tracing subsystem. A race condition can occur when opening a tracer option file while the corresponding trace instance is being removed, causing the kernel to access memory that has already been released. A local user could exploit this use-after-free...

CVE-2026-97932

A flaw was found in the Linux kernel's tracing subsystem. A use-after-free vulnerability occurs when an event trigger performs deferred cleanup while a tracing instance is removed, leading to the access of already freed memory. A local user could exploit this flaw to cause memory corruption,...

CVE-2026-97923

A flaw was found in the Linux kernel's tracing subsystem. When initialization of a histogram variable reference fails during trace event configuration, the allocated memory is not properly released. A local user with administrative or tracing privileges can exploit this vulnerability by repeatedl...

CVE-2026-97924

A flaw was found in the Linux kernel's tracing subsystem. When attempting to remove a user-defined trace event, the kernel destroys the event's field list before confirming whether unregistering the event succeeds. If event removal fails because the event is still enabled or active, the event...

CVE-2026-97922

A flaw was found in the Linux kernel's tracing subsystem. This vulnerability allows a privileged local user to cause a Denial of Service DoS through memory exhaustion. By repeatedly creating and removing histogram event triggers that reference the same variable multiple times, the kernel fails to...

CVE-2026-97921

A flaw was found in the Linux kernel's tracing subsystem. When configuring event histogram triggers, specifying an unpermitted modifier for a value or variable fails to release previously allocated memory on error. A local user with tracing access can exploit this flaw by repeatedly submitting...

CVE-2026-97919

A flaw was found in the Linux kernel's tracing subsystem. When creating a named histogram trigger, the kernel registers the trigger before completing its setup. If initialization fails, the object is freed without being removed from the global tracking list. A local attacker can exploit this flaw...

CVE-2026-97918

A flaw was found in the Linux kernel's tracing subsystem. When enabling a histogram event trigger fails, improper registration cleanup can leave an already freed trigger referenced on an internal tracking list. A local attacker with permission to configure event tracing could exploit this flaw to...

CVE-2026-98032

A flaw was found in the Linux kernel's tracing subsystem. A race condition occurs when concurrent subbuffer resizing takes place while raw trace data is being read. A local user could exploit this flaw to cause a Denial of Service DoS or disclose uninitialized kernel memory due to stale buffer si...

PT-2026-93655

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free crash can occur in the tracing subsystem. The files show event filters and show event triggers do not take a reference to the trace array they are displaying...

CVE-2026-89749

A flaw was found in the Linux kernel. Specifically, within the tracing subsystem, the eventteststuff function can pass an invalid error pointer to kthreadstop if kthreadrun fails to create a kernel thread. This improper handling of error pointers, particularly under memory pressure, leads to...

Linux Distros Unpatched Vulnerability : CVE-2026-89749

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop...

CVE-2026-89748

A flaw was found in the Linux kernel's tracing subsystem. An issue in the simpleringbufferswapreaderpage function, related to retry exhaustion during ring buffer reader page swaps, can lead to incorrect handling of successful or failed operations. This can result in corruption of the ring buffer,...

AZL-100491 CVE-2026-89749 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

CVE-2026-89749

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix crash passing ERRPTR to kthreadstop eventteststuff calls kthreadrun and unconditionally passes the returned taskstruct pointer to kthreadstop. kthreadrun returns an error pointer such as ERRPTR-ENOMEM when kthread...

DEBIAN-CVE-2026-89746

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...

AZL-100169 CVE-2026-89746 affecting package kernel for versions less than 6.6.157.1-1

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix use-after-free with same-name named triggers When two hist triggers on different events are registered with the same name=, the second one reuses the first as nameddata. Both are added to tr-histvars by savehistvars...