CVE-2026-68174

A flaw was found in the Linux kernel's tracing subsystem. When handling dynamic events, a memory collision occurs where a reference counter is mistakenly interpreted as a module pointer. This can happen when filtering or setting events for a specific module without properly checking the event's dynamic status. An attacker could exploit this by triggering a scenario that causes the kernel to attempt to dereference an invalid pointer, leading to a system crash and a Denial of Service (DoS).

This issue affects the kernel tracing subsystem when using dynamic trace events. A union collision between module pointer and refcnt in trace_event_call can cause incorrect module dereference. Systems not enabling dynamic trace events are not affected.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.