vulntracker.iovulntracker.io
© 2026 vulntracker.io

CVE-2026-97932

tracing: Don't dereference trace_event_file in deferred trigger free

N/A
Published: September 25, 2026 at 10:22 AM UTC
Updated: October 19, 2026 at 10:17 AM UTC
1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available
Start FreeSign In
Severity
N/A
Exploit prediction
EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference trace_event_file in deferred trigger free The enable_event trigger defers trace_event_put_ref() to the trigger free kthread, but the trace_event_file can already be freed when the instance is removed. Keep the trace_event_call directly in enable_trigger_data so the deferred free does not access the freed trace_event_file.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel· Linux
90%
159fdc3e01dca5fdbc412fcd8b239895733a270d7.1.67.2e091351b38818ef620d27f44f4bfd625f13afbff
Vendor states this is fixed in 67fb91a7f7bb1d958cf9cc249c912bca9b2fc821 (fixed)
Vendor states this is fixed in bcfe2816e6ec46c3f4c58aa4264476665ddb3f69 (fixed)
Vendor states this is fixed in 7.2 (unaffected)
Vendor states this is fixed in 7.2.7 (unaffected)
Vendor states this is fixed in 7.3 (unaffected)
Vendor states this is fixed in 7.3-rc3 (unaffected)

Remediation

No guide yet

No remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.

References (2)

Source: cverecord
https://git.kernel.org/stable/c/67fb91a7f7bb1d958cf9cc249c912bca9b2fc821
Source: cverecord
https://git.kernel.org/stable/c/bcfe2816e6ec46c3f4c58aa4264476665ddb3f69

Quick Info

StatusRECEIVED

Get alerted

Stop reading CVE feeds looking for your own stack

Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.

Create accountSign in
Free plan, no card