CVE-2026-23309
kernel: tracing: Add NULL pointer check to trigger_data_free()
Loading…
Severity
UnknownRed Hat Product Security
CVSS
Review impact separately from score.
Published · March 25, 2026
Updated · June 28, 2026
Description
A flaw was found in the Linux kernel. When the 'trigger_data_alloc()' function fails to allocate memory and returns a null pointer, the subsequent 'trigger_data_free()' function attempts to access this null pointer. This null pointer dereference can lead to a system crash, resulting in a Denial of Service (DoS) for the affected system.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-476 · NULL Pointer Dereference