CVE-2026-68283

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tracing component. The problem occurs because the synchronization previously provided by trigger data free() was removed when the kfree() of event trigger data was moved to a kthread. Consequently, functions such as event hist trigger free(), event hist trigger named free(), and event enable trigger free() free satellite data—specifically hist data, cmd ops, and enable data—immediately after trigger data free() returns. This allows a concurrent tracepoint handler to access the freed data via a list del rcu()'d trigger.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.