CVE-2026-97924

CVE CVE-2026-97924EUVD EUVD-2026-86778Published 2026-09-25T10:22:42.000Z

What the advisory describes

In the Linux kernel, the following vulnerability has been resolved: tracing/user_events: Don't destroy fields when event removal fails destroy_user_event() destroys the event's fields before attempting to remove the trace event call. If user_event_set_call_visible() fails, e.g. because the event is still enabled and trace_remove_event_call() returns -EBUSY, the event is left registered with an irreversibly destroyed field list. Any subsequent interaction with the event then operates on an empty field list while it is still fully visible in tracefs. Move the field destruction after the call removal, and splice the field list back onto the event when the removal fails so the event remains in a consistent state.

Source: EUVD (ENISA), in the words of the advisory.

Products the advisory names

These come from the advisory itself, not from any check we performed.

Linux — Linux 7f5a08c79df35e68f1a43033450c5050f12bc155 <0892da2272ec565858aa1ec5458552d699de9142; patch: 6.12.111; patch: 0; 7f5a08c79df35e68f1a43033450c5050f12bc155 <62d6544e86506bb0695c9594c713cba859666f2f; 7f5a08c79df35e68f1a43033450c5050f12bc155 <9c62b7e92b6086a2a0aeb71f3553dd8cf7fdcd8b; 5.18; patch: 7.3-rc3; patch: 6.18.53; patch: 7.2.7; 7f5a08c79df35e68f1a43033450c5050f12bc155 <2deb753127d7b7035e893955c5e91875e767d1f8

The versions shown are the advisory's own. Patchlage compares no version numbers and derives no judgement from them — which version is installed is something a person has to look up.

Carried in the product catalogue

An estate covering these products can be recorded in Patchlage. An advisory about them appears in the next morning's situation report.

Linux — Linux

Does this concern one of your customers?

This page cannot answer that — it does not know your estate. Whoever has recorded their environments gets the answer the morning after publication, together with a paragraph they can forward to the customer unedited.

Try it for 28 days

Patchlage reports hits and suspected hits. About everything else this system says nothing — neither this page nor the situation report ever claims that an estate is safe.