01 Record

CVE-2026-97933

tracing: Take trace_array reference when opening a tracer options file

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

tracing: Take trace_array reference when opening a tracer options file

03 Exploitation and scoring

Exploitation: Not assessed. CISA has not published an exploitation assessment for this record, and it is not in the KEV catalog. That is an absence of assessment, not a finding of no risk.
SSVC decision: Not assessed by CISA
EPSS probability: 0.20% probability of exploitation activity in the next 30 days.
EPSS percentile: Equal to or higher than the score of 10.5% of scored records. A rank, not a probability.
NVD base score: The NVD has published no score for this record
NVD CVSS vector: No NVD score to derive
NVD analysis status: Received. NVD last modified this record on 2026-10-21.
Red Hat severity: Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2026-09-25 10:22Z1 MO AGO

Last updated

2026-10-21 12:53Z7 DAYS AGO

Reserved

2026-09-25

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-825Expired Pointer DereferenceBase

Data version

5.2

Document digest

9567d914a93bbb7b708bd90b54da53d11801a8b2b8f0c622131c56886042fd13

05 Affected products

VendorProductVersionsPlatforms

LinuxLinux7e2cfbd2d3c86afcd5c26b5c4b1dd251f63c5838 to < 61894ea0d2a1ae8ce903abf73bd56958c035f182, 7e2cfbd2d3c86afcd5c26b5c4b1dd251f63c5838 to < b2890064a12efbeb3b3c093e69e9010dd244c881, 7e2cfbd2d3c86afcd5c26b5c4b1dd251f63c5838 to < d9232a90c6f7de822177d35d73d9234cba523ef9, 7e2cfbd2d3c86afcd5c26b5c4b1dd251f63c5838 to < b2fb87d29ffb3a7a9ccc5acf12898ecb80587427, 7e2cfbd2d3c86afcd5c26b5c4b1dd251f63c5838 to < ed0aff60f83a9bdc2f6556376ac79c96b3ce7e80, 952e477f908048145a5eb2ed3d431d9efc1e1073, b3183f5f05cd867f5c17122773ca5aa8d07b51af, bf38c1d29f8bfe9631b62a67f8dd1b8f7efb7139, 2617afde0c3db285778734b0ccad9a55b4f9cda2, 586787a0331aa2d7d244e9c4400d2a73295b0cf0, 5.4.257 to < 5.5, 5.10.197 to < 5.11, 5.15.133 to < 5.16, 6.1.55 to < 6.2, 6.5.5 to < 6.6, 6.6—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/61894ea0d2a1ae8ce903abf73bd56958c035f182
git.kernel.orghttps://git.kernel.org/stable/c/b2890064a12efbeb3b3c093e69e9010dd244c881
git.kernel.orghttps://git.kernel.org/stable/c/d9232a90c6f7de822177d35d73d9234cba523ef9
git.kernel.orghttps://git.kernel.org/stable/c/b2fb87d29ffb3a7a9ccc5acf12898ecb80587427
git.kernel.orghttps://git.kernel.org/stable/c/ed0aff60f83a9bdc2f6556376ac79c96b3ce7e80

07 Fixed in

Debian 12

linux
No fix yet
linux-6.12
Fixed in 6.12.113-1~deb12u1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 13

linux
Fixed in 6.12.113-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.

Debian 14

linux
Fixed in 7.2.7-1

Source: Debian Security Tracker, the Debian security team. Received through OSV.dev. Reformatted by exploit.cc.