CVE-2026-99140

A flaw was found in the Linux kernel's tracing subsystem. A local user with access to the tracing interface can cause a Denial of Service (DoS) due to a race condition when attaching histogram triggers to filtered events. Under specific timing conditions, buffered trace events are processed without expected reservation tracking, triggering an internal kernel warning that can halt the system if configured to panic on warnings, as well as produce inaccurate timestamps.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.