CVE-2023-53560

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.5.0-rc1

Description The Linux kernel tracing subsystem contained a flaw in how histograms were handled with referenced variables. Specifically, hist triggers could have referenced variables without having direct variables fields. This could lead to a use-after-free condition when removing a hist trigger with referenced variables, resulting in a kernel crash. The issue was triggered by creating a synthetic event and a hist trigger referencing it, then attempting to remove the trigger.

Recommendations Update to a version newer than 6.5.0-rc1.