CVE-2026-97932 PUBLISHED

tracing: Don't dereference trace_event_file in deferred trigger free

Assigner: Linux
Reserved: 25.09.2026 Published: 25.09.2026 Updated: 25.09.2026

In the Linux kernel, the following vulnerability has been resolved:

tracing: Don't dereference trace_event_file in deferred trigger free

The enable_event trigger defers trace_event_put_ref() to the trigger free kthread, but the trace_event_file can already be freed when the instance is removed.

Keep the trace_event_call directly in enable_trigger_data so the deferred free does not access the freed trace_event_file.

Product Status

Vendor Linux
Product Linux
Versions Default: unaffected
  • affected from e091351b38818ef620d27f44f4bfd625f13afbff to 67fb91a7f7bb1d958cf9cc249c912bca9b2fc821 (excl.)
  • affected from e091351b38818ef620d27f44f4bfd625f13afbff to bcfe2816e6ec46c3f4c58aa4264476665ddb3f69 (excl.)
  • Version 159fdc3e01dca5fdbc412fcd8b239895733a270d is affected
  • affected from 7.1.6 to 7.2 (excl.)
Vendor Linux
Product Linux
Versions Default: affected
  • Version 7.2 is affected
  • unaffected from 0 to 7.2 (excl.)
  • unaffected from 7.2.7 to 7.2.* (incl.)
  • unaffected from 7.3-rc3 to * (incl.)

References