CVE-2026-68177

A flaw was found in the Linux kernel's tracing module. When a module with an active enable/disable event is removed, its data can be accessed after it has been freed, leading to a use-after-free vulnerability. This could allow a local attacker to cause a denial of service or potentially escalate privileges.

This vulnerability is rated as Moderate impact by Red Hat because exploitation requires local access and elevated system privileges to configure trace event triggers and unload kernel modules. A successful exploit depends on a narrow race condition occurring during module unregistration while events remain active, limiting the attack surface to administrative or debugging environments. Supported Red Hat Enterprise Linux releases are not affected as the upstream commit that introduced this flaw was never included in Red Hat kernels.