Use-after-free Vulnerability in Linux Kernel Affecting Trace Array Functionality

CVE-2026-90014

What is CVE-2026-90014?

A vulnerable aspect of the Linux Kernel involved the show_event_filters and show_event_triggers files associated with trace arrays. These files lack proper reference management for the trace array they display, allowing the array to be freed while being accessed. This flaw can lead to a use-after-free situation, potentially resulting in system crashes. The recent update addresses this issue by implementing a reference count mechanism on the trace array upon file access. This ensures the integrity of the trace array during read operations, thereby eliminating the risk of unintended memory freeing.

References