CVE-2026-99235

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tracing histogram field variables. The create field var hist() function incorrectly saves a pointer to a compatible histogram instead of the event file. Because find compatible hist() matches based on keys alone, it may select a histogram without its own variables. This allows a user to remove the histogram while the target still maintains a pointer to it, potentially leading to system crashes or kernel memory corruption.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.