CVE-2026-72071

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the user event mm dup() function within the tracing/user events component. The problem occurs during a fork() operation when the function iterates through the parent memory descriptor's enabler list using rcu read lock() without acquiring the event mutex. Simultaneously, the user event enabler destroy() function removes an enabler from the list and immediately frees it using kfree() and user event put() without waiting for an RCU grace period. This creates a race condition where a reader may dereference a freed enabler or attempt to perform user event get() on a freed user event. This condition can be triggered by an unprivileged task capable of opening user events data through a multithreaded process that concurrently registers, unregisters an enabler, and calls fork().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.