SB20260727105 - NULL pointer dereference in Linux kernel trace

Description

This security bulletin contains information about 1 vulnerability.

1) NULL pointer dereference (CVE-ID: CVE-2026-64451)

CWE-ID: CWE-476 - NULL Pointer Dereference

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to a NULL pointer dereference in func_set_flag() in the tracing subsystem when writing to a function tracer option file after the active tracer has been switched to a different tracer. A local user can write to the option file in that state to cause a denial of service.

The issue is triggered when a process keeps a function tracer option file open and the current tracer is changed before a subsequent write occurs.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/69f17ac132a38974cf1defb480cef6b79d1ab768
• https://git.kernel.org/stable/c/c3e94604675e3db186111b8942650d86577df9b0