CVE-2026-23309

tracing: Add NULL pointer check to trigger_data_free()

published March 25, 2026

CVSS
—
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: Add NULL pointer check to trigger_data_free()

If trigger_data_alloc() fails and returns NULL, event_hist_trigger_parse()

jumps to the out_free error path. While kfree() safely handles a NULL

pointer, trigger_data_free() does not. This causes a NULL pointer

dereference in trigger_data_free() when evaluating

data->cmd_ops->set_filter.

Fix the problem by adding a NULL pointer check to trigger_data_free().

The problem was found by an experimental code review agent based on

gemini-3.1-pro while reviewing backports into v6.18.y.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Published
2026-03-25T10:27Z
EPSS history
Timeline
  • 25 MAR 10:27Z
    tracing: Add NULL pointer check to trigger_data_free()
    cvelistv5