CVE-2026-90014

CVE-2026-90014

High · published September 16, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
5.4
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: Have show_event_filters/triggers files take trace array ref

The newly added files show_event_filters and show_event_triggers that show

all filters or triggers that are set within the trace array do not take a

reference for the trace array it is showing. Without taking a reference,

the trace_array may be freed via "rmdir" while a task is reading one of

theses files. Those files iterate all the events within an instance

(trace_array) and nothing prevents that instance from being freed while

its data is being read. This causes a use-after-free crash.

Have the open of both those files take the trace_array reference via the

trace_array_get() that prevents the trace_array from being freed while the

files are opened.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00165 · 5.4th percentile
Published
2026-09-16T15:17Z
References (2)
EPSS history
Timeline
  • 18 SEP 04:02Z
    EPSS moved — → 0%
    epss
  • 16 SEP 10:33Z
    tracing: Have show_event_filters/triggers files take trace array ref
    cvelistv5