5.5

CVE-2026-23309

tracing: Add NULL pointer check to trigger_data_free()

In the Linux kernel, the following vulnerability has been resolved:

tracing: Add NULL pointer check to trigger_data_free()

If trigger_data_alloc() fails and returns NULL, event_hist_trigger_parse()
jumps to the out_free error path. While kfree() safely handles a NULL
pointer, trigger_data_free() does not. This causes a NULL pointer
dereference in trigger_data_free() when evaluating
data->cmd_ops->set_filter.

Fix the problem by adding a NULL pointer check to trigger_data_free().

The problem was found by an experimental code review agent based on
gemini-3.1-pro while reviewing backports into v6.18.y.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Linux ≫ Linux Kernel Version >= 6.1.165 < 6.1.167
Linux ≫ Linux Kernel Version >= 6.6.128 < 6.6.130
Linux ≫ Linux Kernel Version >= 6.12.75 < 6.12.77
Linux ≫ Linux Kernel Version >= 6.18.14 < 6.18.17
Linux ≫ Linux Kernel Version >= 6.19.4 < 6.19.7
Linux ≫ Linux Kernel Version7.0 Updaterc1
Linux ≫ Linux Kernel Version7.0 Updaterc2
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.12% 0.023
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 NULL Pointer Dereference

The product dereferences a pointer that it expects to be valid but is NULL.

https://git.kernel.org/stable/c/13dcd9269e225e4c4ceabdaeebe2ce4661b54c6e
Patch
https://git.kernel.org/stable/c/59c15b9cc453b74beb9f04c6c398717e73612dc3
Patch
https://git.kernel.org/stable/c/42b380f97d65e76e7b310facd525f730272daf57
Patch
https://git.kernel.org/stable/c/2ce8ece5a78da67834db7728edc801889a64f643
Patch
https://git.kernel.org/stable/c/477469223b2b840f436ce204333de87cb17e5d93
Patch
https://git.kernel.org/stable/c/457965c13f0837a289c9164b842d0860133f6274
Patch