Use-after-free in Linux kernel - CVE-2026-97919

Vulnerability details

The vulnerability allows a local user to trigger a use-after-free read.

The vulnerability exists due to an incorrect reference-counting order in event_hist_trigger_named_init() when initialization of a named histogram trigger fails because alloc_hist_pad() cannot allocate. A local user can cause initialization to fail and subsequently look up the trigger by name to trigger a use-after-free read.

Affected software

How to mitigate CVE-2026-97919

External References

• https://git.kernel.org/stable/c/0fe23b8eaba0d3372c66b7b31204408da0715edc
• https://git.kernel.org/stable/c/2ffaade3611bd9501bc0b9d5d19fc75bfee7a16b
• https://git.kernel.org/stable/c/91c15cdda6033e2439f5975b938754152f3d6e38

Related Security Bulletins

• Use-after-free in Linux kernel trace