CVE-2026-68177

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free bug exists in the tracing component. The issue occurs because the module refcount is released immediately while the freeing of enable event data is handled via the private data free() callback. If a module is removed while an event that enables or disables it remains active, the system may attempt to read module data after it has been removed. This is related to the handling of the trace event put ref() function and the RCU (Read-Copy-Update) grace period, a synchronization mechanism used to ensure data consistency during concurrent access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.