Use-after-free in Linux kernel - CVE-2026-97935

Vulnerability details

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to use-after-free in hist_register_trigger() when registering a named histogram trigger using common_timestamp with an unknown trace clock. A local user can write a crafted histogram trigger with an unknown clock and then create another trigger with the same name to cause a denial of service.

Affected software

How to mitigate CVE-2026-97935

External References

• https://git.kernel.org/stable/c/65d1e28198f344832a8a63e8ccf84b8f65b92a32
• https://git.kernel.org/stable/c/6ede78d0563a2a3ae3e46f9c07cedb5d79645429
• https://git.kernel.org/stable/c/cfad128171f8e2237a3c723d6478ef2cfb3b9127

Related Security Bulletins

• Use-after-free in Linux kernel trace