CVE-2026-74471

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description The trace module add events() function fails to check the return value of register event(), leading it to call add event to tracers() unconditionally. If register event() fails (for instance, due to a failure in event init()), the trace event call is not added to the ftrace events list, yet add event to tracers() still creates a trace event file pointing to it. If the module loading subsequently fails and the module memory is freed, the tracing state retains a stale trace event call pointer in trace event file. This results in a use-after-free condition when tracefs or tracing subsystem operations are executed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.