CVE-2026-97932: Linux

EPSS: 0.2% chance of exploitation in the next 30 days.

In the Linux kernel, the following vulnerability has been resolved: tracing: Don't dereference trace_event_file in deferred trigger free The enable_event trigger defers trace_event_put_ref() to the trigger free kthread, but the trace_event_file can already be freed when the instance is removed. Keep the trace_event_call directly in enable_trigger_data so the deferred free does not access the freed trace_event_file.

Affected products

• Linux Linux: from 7.1.6, before 7.2 (fixed in 7.2); from 7.2, before 7.2.7 (fixed in 7.2.7)

Published 2026-09-25. Last modified 2026-09-25.