CVE-2026-23309
EUVD-2026-1525125.03.2026, 11:16
In the Linux kernel, the following vulnerability has been resolved: tracing: Add NULL pointer check to trigger_data_free() If trigger_data_alloc() fails and returns NULL, event_hist_trigger_parse() jumps to the out_free error path. While kfree() safely handles a NULL pointer, trigger_data_free() does not. This causes a NULL pointer dereference in trigger_data_free() when evaluating data->cmd_ops->set_filter. Fix the problem by adding a NULL pointer check to trigger_data_free(). The problem was found by an experimental code review agent based on gemini-3.1-pro while reviewing backports into v6.18.y.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| linux | linux_kernel | 6.1.165 ≤ 𝑥 < 6.1.167 |
| linux | linux_kernel | 6.6.128 ≤ 𝑥 < 6.6.130 |
| linux | linux_kernel | 6.12.75 ≤ 𝑥 < 6.12.77 |
| linux | linux_kernel | 6.18.14 ≤ 𝑥 < 6.18.17 |
| linux | linux_kernel | 6.19.4 ≤ 𝑥 < 6.19.7 |
| linux | linux_kernel | 7.0:rc1 |
| linux | linux_kernel | 7.0:rc2 |
𝑥
= Vulnerable software versions
Debian Releases
Amazon Linux Releases
Amazon Package | |||
|---|---|---|---|
| bpftool6.18 |
| ||
| bpftool6.18-debuginfo |
| ||
| kernel-livepatch-6.18.20-20.229 |
| ||
| kernel6.18 |
| ||
| kernel6.18-debuginfo |
| ||
| kernel6.18-debuginfo-common-aarch64 |
| ||
| kernel6.18-debuginfo-common-x86_64 |
| ||
| kernel6.18-devel |
| ||
| kernel6.18-headers |
| ||
| kernel6.18-libbpf |
| ||
| kernel6.18-libbpf-debuginfo |
| ||
| kernel6.18-libbpf-devel |
| ||
| kernel6.18-libbpf-static |
| ||
| kernel6.18-modules-extra |
| ||
| kernel6.18-modules-extra-common |
| ||
| kernel6.18-tools |
| ||
| kernel6.18-tools-debuginfo |
| ||
| kernel6.18-tools-devel |
| ||
| perf6.18 |
| ||
| perf6.18-debuginfo |
| ||
| python3-perf6.18 |
| ||
| python3-perf6.18-debuginfo |
|
Common Weakness Enumeration
References