CVE-2026-74633

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the tracing component during module event cache removal. When a module-only event filter is cached while the module has not been loaded, the event mod->match variable is set to NULL. If a subsequent write operation attempts to remove a specific match from that same module, the remove cache mod() function passes this NULL value to the strcmp() function, leading to a kernel crash. This can be triggered from userspace by writing specific filter patterns to the /sys/kernel/tracing/set event endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.