CVE-2026-90014

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free crash can occur in the tracing subsystem. The files show event filters and show event triggers do not take a reference to the trace array they are displaying. Consequently, the trace array can be freed via an rmdir operation while a task is reading these files, as they iterate through all events within a trace array instance without a mechanism to prevent the instance from being freed during the read process.

Recommendations Ensure the trace array get() function is called when opening show event filters and show event triggers to maintain a reference to the trace array and prevent it from being freed while the files are open. At the moment, there is no information about a newer version that contains a fix for this vulnerability.