Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-99233

Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
02/11/2026
Última modificación:
03/11/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> tracing/histograms: Verify event_call identity when updating synth_event refcount<br /> <br /> In event_hist_trigger_parse() and hist_unreg_all(), the histogram<br /> registration and unregistration paths look up find_synth_event() using<br /> trace_event_name(file-&gt;event_call) and adjust se-&gt;ref if a match is<br /> found.<br /> <br /> Because find_synth_event() only compares the event basename, registering<br /> or removing a histogram on a non-synthetic trace event whose basename<br /> matches a synthetic event erroneously modifies the synthetic event&amp;#39;s<br /> reference count. If a histogram is registered on the non-synthetic<br /> event before the synthetic event is created and removed afterwards,<br /> se-&gt;ref is decremented without a matching increment, allowing the<br /> synthetic event to be freed while an active histogram action still holds<br /> a pointer to it.<br /> <br /> Introduce find_synth_event_call() to verify that &amp;se-&gt;call matches<br /> file-&gt;event_call before adjusting se-&gt;ref.