Linux Kernel Tracing Vulnerability in Event File Handling

CVE-2026-99235

What is CVE-2026-99235?

A vulnerability has been identified in the Linux kernel concerning event file handling, specifically during the tracing process. The flaw arises when the create_field_var_hist function erroneously saves a pointer reference to a histogram that may no longer be valid. This can lead to potential use-after-free scenarios, allowing attackers to exploit freed memory areas. Consequently, this vulnerability undermines system stability and could enable malicious actors to execute arbitrary code or disrupt system operations when triggers are removed. It's crucial for users to apply the latest patches to safeguard against these threats.

References