SB20260812256 - Use-after-free in Linux kernel trace

Description

This security bulletin contains information about 1 vulnerability.

1) Use-after-free (CVE-ID: CVE-2026-68283)

CWE-ID: CWE-416 - Use After Free

CVSSv4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a use-after-free condition.

The vulnerability exists due to a use-after-free in event trigger cleanup in the tracing subsystem when freeing trigger private data during concurrent tracepoint handling. A local user can trigger concurrent tracepoint activity while removing a trigger to cause a use-after-free condition.

The issue affects histogram and enable trigger teardown paths where tracepoint handlers may still access satellite data after the trigger has been removed.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/79097812153b826fc156a2930ec8a90ed9edf4a2
• https://git.kernel.org/stable/c/b9c8a1400a3bf633f32820d184f3e05fed0f4af7