https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 17:09:59 +0000 https://vulnerability.circl.lu/vuln/cve-2026-74471 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tracing: Check return value of __register_event() in trace_module_add_events()</p> <p>trace_module_add_events() ignores the return value of __register_event() and unconditionally calls __add_event_to_tracers() for each event.</p> <p>If __register_event() fails (for example, if event_init() fails), the trace_event_call is not added to ftrace_events list, but __add_event_to_tracers() still creates a trace_event_file pointing to it. If module loading subsequently fails and module memory is freed, tracing state retains a stale trace_event_call pointer in trace_event_file, leading to a use-after-free when tracefs or tracing subsystem operations are later executed.</p> <p>Fix this by checking the return value of __register_event() and only calling __add_event_to_tracers() if event registration succeeded.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>tracing: Check return value of __register_event() in trace_module_add_events()</p> <p>trace_module_add_events() ignores the return value of __register_event() and unconditionally calls __add_event_to_tracers() for each event.</p> <p>If __register_event() fails (for example, if event_init() fails), the trace_event_call is not added to ftrace_events list, but __add_event_to_tracers() still creates a trace_event_file pointing to it. If module loading subsequently fails and module memory is freed, tracing state retains a stale trace_event_call pointer in trace_event_file, leading to a use-after-free when tracefs or tracing subsystem operations are later executed.</p> <p>Fix this by checking the return value of __register_event() and only calling __add_event_to_tracers() if event registration succeeded.</p> https://vulnerability.circl.lu/vuln/cve-2026-74471