CVE-2026-89746

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tracing component when two histogram triggers on different events are registered using the same name= parameter. The system incorrectly reuses the first trigger as named data but fails to remove the second trigger's entry from the tr->hist vars list after freeing its hist data via the destroy hist data() function. This results in a dangling pointer and a leaked trace array reference. A subsequent histogram trigger referencing a variable causes the find var file() function to dereference the freed memory, which can lead to a kernel panic.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.