7.8

CVE-2026-74471

tracing: Check return value of __register_event() in trace_module_add_events()

In the Linux kernel, the following vulnerability has been resolved:

tracing: Check return value of __register_event() in trace_module_add_events()

trace_module_add_events() ignores the return value of __register_event()
and unconditionally calls __add_event_to_tracers() for each event.

If __register_event() fails (for example, if event_init() fails), the
trace_event_call is not added to ftrace_events list, but
__add_event_to_tracers() still creates a trace_event_file pointing to it.
If module loading subsequently fails and module memory is freed, tracing
state retains a stale trace_event_call pointer in trace_event_file,
leading to a use-after-free when tracefs or tracing subsystem operations
are later executed.

Fix this by checking the return value of __register_event() and only
calling __add_event_to_tracers() if event registration succeeded.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
Produkt Linux
Default Statusunaffected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < 3bf965a2827c44f03294107703e7ba53fbd0a69a
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < 9d6d79744f01eacaf3d5522f4fcd59939581abfd
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < 54b7a358f6399c1242d2fb7f4f96085af34baa5e
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < d61ee2a27dfd5eb43ddc18af40168f5b9eb1cea5
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < 22f954f7a8afe975e85517aff41b35defe05144b
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < cbb5ed3be9cae70e1c12b1991009b4e12bf4a4ca
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < 000765dcdc3edf128990762790543adc4b868f6c
Status affected
Version ae63b31e4d0e2ec09c569306ea46f664508ef717
Version < ac8719969e6c3c54e939834df812bc41f25453cf
Status affected
HerstellerLinux
Produkt Linux
Default Statusaffected
Version 3.10
Status affected
Version 0
Version < 3.10
Status unaffected
Version <= 5.10.*
Version 5.10.265
Status unaffected
Version <= 5.15.*
Version 5.15.216
Status unaffected
Version <= 6.1.*
Version 6.1.183
Status unaffected
Version <= 6.6.*
Version 6.6.151
Status unaffected
Version <= 6.12.*
Version 6.12.103
Status unaffected
Version <= 6.18.*
Version 6.18.44
Status unaffected
Version <= 7.1.*
Version 7.1.8
Status unaffected
Version <= *
Version 7.2
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.13% 0.027
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
416baaa9-dc9f-4396-8d5f-8c081fb06d67 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/d61ee2a27dfd5eb43ddc18af40168f5b9eb1cea5
https://git.kernel.org/stable/c/22f954f7a8afe975e85517aff41b35defe05144b
https://git.kernel.org/stable/c/cbb5ed3be9cae70e1c12b1991009b4e12bf4a4ca
https://git.kernel.org/stable/c/000765dcdc3edf128990762790543adc4b868f6c
https://git.kernel.org/stable/c/ac8719969e6c3c54e939834df812bc41f25453cf
https://git.kernel.org/stable/c/3bf965a2827c44f03294107703e7ba53fbd0a69a
https://git.kernel.org/stable/c/54b7a358f6399c1242d2fb7f4f96085af34baa5e
https://git.kernel.org/stable/c/9d6d79744f01eacaf3d5522f4fcd59939581abfd