CVE-2026-99235 is a use-after-free vulnerability in the Linux kernel's tracing subsystem. The flaw arises because the kernel saves a pointer to a compatible histogram instead of the event file, which can be freed prematurely, leading to a kernel memory corruption detected by KASAN. This issue has been resolved by changing the code to save the event file directly, preventing the use-after-free condition.