7.8

CVE-2026-74471: tracing: Check return value of __register_event() in trace_module_add_events()

Received
AliasesUBUNTU-CVE-2026-74471DEBIAN-CVE-2026-74471
Published 15-08-2026Last modified 16-10-2026

Vulnerability summary

CVE-2026-74471 is a high (CVSS 7.8) vulnerability in linux. EPSS estimates a 0.13% chance of exploitation in the next 30 days, higher than 2.2% of scored vulnerabilities.

Priority
Routine

Not severe (CVSS 7.8, local access); no exploitation reported by the 5 checked sources

Source freshness unavailable

How is this decided?
CVSS score
7.8/10
010
High · v3.1 (CVE.org)
EPSS score
0.13%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 22 · Related 21
OPENSUSE-SU-2026:22091-1SUSE-SU-2026:24179-1SUSE-SU-2026:24181-1SUSE-SU-2026:24182-1SUSE-SU-2026:24184-1SUSE-SU-2026:24197-1

Timeline

  1. 15-08-2026
    PublishedVulnerability first disclosed.
  2. 16-10-2026
    Last modifiedVulnerability information updated.

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Check return value of __register_event() in trace_module_add_events() trace_module_add_events() ignores the return value of __register_event() and unconditionally calls __add_event_to_tracers() for each event. If __register_event() fails (for example, if event_init() fails), the trace_event_call is not added to ftrace_events list, but __add_event_to_tracers() still creates a trace_event_file pointing to it. If module loading subsequently fails and module memory is freed, tracing state retains a stale trace_event_call pointer in trace_event_file, leading to a use-after-free when tracefs or tracing subsystem operations are later executed. Fix this by checking the return value of __register_event() and only calling __add_event_to_tracers() if event registration succeeded.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

0.13%

Chance of exploitation in the next 30 days

Percentile

2%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.13% on 06-10-2026

06-10-202605-11-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

No weakness data has been published for this record.

Affected systems

Version check

Known conditions: local access, low-privilege account, no user interaction (CVSS vector). Other conditions: not stated in public data.

Ubuntu169 products
  • linuxAll versions (No fix recorded) | < 5.15.0-198.208 | < 7.0.0-42.42
  • linux-allwinner-5.19All versions (No fix recorded)
  • linux-awsAll versions (No fix recorded) | < 5.15.0-1117.124 | < 7.0.0-1016.17
  • linux-aws-5.0All versions (No fix recorded)
  • linux-aws-5.11All versions (No fix recorded)
Debian2 products
  • linux< 6.1.187-1 | < 6.12.105-1 | < 7.1.8-1
  • linux-6.12< 6.12.107-1~deb12u1
Linux1 product
  • linux≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < 3bf965a2827c44f03294107703e7ba53fbd0a69a | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < 9d6d79744f01eacaf3d5522f4fcd59939581abfd | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < 54b7a358f6399c1242d2fb7f4f96085af34baa5e | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < d61ee2a27dfd5eb43ddc18af40168f5b9eb1cea5 | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < 22f954f7a8afe975e85517aff41b35defe05144b | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < cbb5ed3be9cae70e1c12b1991009b4e12bf4a4ca | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < 000765dcdc3edf128990762790543adc4b868f6c | ≥ ae63b31e4d0e2ec09c569306ea46f664508ef717, < ac8719969e6c3c54e939834df812bc41f25453cf | 3.10

3 vendors · 172 products

References

22 links
Show all 22 references