Linux kernel tracing histogram use-after-free after trigger removal
A flaw in the tracing feature of Linux's core can let systems freeze or be broken into.
Summary
The Linux kernel's tracing histogram code can read memory that was already freed. It shows up when a trigger is removed, and Linux kernels before the fixed stable releases of each branch are affected.
What to do
Check that your Linux kernel is at or above the fixed stable release for its branch (5.10.273, 5.15.224, 6.1.191, 6.6.161, 6.12.115, 6.18.60, 7.2.14, 7.3.1), and read your distribution's advisory.
Update to at least the version for your product:
- Linux 5.10 5.10.273 or later
- Linux 5.15 5.15.224 or later
- Linux 6.1 6.1.191 or later
- Linux 6.6 6.6.161 or later
- Linux 6.12 6.12.115 or later
- Linux 6.18 6.18.60 or later
- Linux 7.2 7.2.14 or later
- Linux 7.3 7.3.1 or later
Products and platforms
CVE IDs
Times
First published
First seen