CVE-2026-74471

/// Technical description

In the Linux kernel, the following vulnerability has been resolved:

tracing: Check return value of __register_event() in trace_module_add_events()

trace_module_add_events() ignores the return value of __register_event()

and unconditionally calls __add_event_to_tracers() for each event.

If __register_event() fails (for example, if event_init() fails), the

trace_event_call is not added to ftrace_events list, but

__add_event_to_tracers() still creates a trace_event_file pointing to it.

If module loading subsequently fails and module memory is freed, tracing

state retains a stale trace_event_call pointer in trace_event_file,

leading to a use-after-free when tracefs or tracing subsystem operations

are later executed.

Fix this by checking the return value of __register_event() and only

calling __add_event_to_tracers() if event registration succeeded.

/// Remediation

Check the references section for vendor advisories, patches, and mitigation guidance. If immediate patching is not possible, review the CVSS vector to understand the attack surface and apply compensating controls such as network segmentation or access restrictions.

/// References