Threats tagged 'ghsa-vp9f-g82m-h958'

CVE-2025-21899 is a medium severity vulnerability in the Linux kernel tracing subsystem where improper handling of hist triggers can corrupt the named_triggers list, leading to a use-after-free condition and potential kernel crash. The flaw occurs because the code fails to properly add triggers to the file->triggers list before an error path frees the data without removing it from the named_triggers list. This results in a dangling pointer that can cause a kernel crash upon subsequent trigger registrations.