{"apiVersion":"1.0","identifier":"CVE-2026-99233","description":"In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Verify event_call identity when updating synth_event refcount In event_hist_trigger_parse() and hist_unreg_all(), the histogram registration and unregistration paths look up find_synth_event() using trace_event_name(file->event_call) and adjust se->ref if a match is found. Because find_synth_event() only compares the event basename, registering or removing a histogram on a non-synthetic trace event whose basename matches a synthetic event erroneously modifies the synthetic event-s reference count. If a histogram is registered on the non-synthetic event before the synthetic event is created and removed afterwards, se->ref is decremented without a matching increment, allowing the synthetic event to be freed while an active histogram action still holds a pointer to it. Introduce find_synth_event_call() to verify that &se->call matches file->event_call before adjusting se->ref.","publishedAt":"2026-11-02T16:17:48","lastModifiedAt":"2026-11-03T20:18:29","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-99233","cvssScore":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","epssProbability":0.00121,"riskScore":0.79,"affectedProduct":"Linux kernel","affectedVersions":"unknown","vulnerabilityType":"Kernel","operatingSystems":[],"links":{"self":"https://www.redsauce.net/api/cves/CVE-2026-99233","webPages":{"es":"https://www.redsauce.net/es/cves/CVE-2026-99233","en":"https://www.redsauce.net/en/cves/CVE-2026-99233","fr":"https://www.redsauce.net/fr/cves/CVE-2026-99233","pt":"https://www.redsauce.net/pt/cves/CVE-2026-99233","de":"https://www.redsauce.net/de/cves/CVE-2026-99233","sk":"https://www.redsauce.net/sk/cves/CVE-2026-99233","el":"https://www.redsauce.net/el/cves/CVE-2026-99233"},"source":"https://nvd.nist.gov/vuln/detail/CVE-2026-99233"}}