CVE-2026-97933

A flaw was found in the Linux kernel's tracing subsystem. A race condition can occur when opening a tracer option file while the corresponding trace instance is being removed, causing the kernel to access memory that has already been released. A local user could exploit this use-after-free vulnerability to cause a system crash resulting in a Denial of Service (DoS) or potential memory corruption.

This vulnerability is rated as Moderate impact for Red Hat Enterprise Linux because exploitation requires local access and winning a tight race condition between tearing down a trace instance and accessing its configuration files. In typical enterprise deployments, interaction with the tracing interface requires elevated administrative privileges, significantly constraining attacker exposure. Earlier releases such as Red Hat Enterprise Linux 7, 8, and 9 are not affected as they do not contain the vulnerable tracing implementation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.