Kernel Vulnerability in Linux Affecting Trace Array Mechanism

CVE-2026-90013

What is CVE-2026-90013?

A vulnerability within the Linux kernel related to the trace_array mechanism allows for use-after-free conditions when multiple tasks interact with options files. This occurs because the options files do not secure a trace_array reference upon being opened. Consequently, a task could inadvertently remove an instance of the options descriptor while another task is in the process of using it, resulting in a kernel crash. To mitigate this issue, a new helper function, trace_array_options_get(), has been implemented to ensure proper reference counting is maintained, thereby enhancing the stability and reliability of the kernel's tracing capabilities.

References