The vulnerability is a use‑after‑free flaw introduced in the Linux kernel tracing subsystem. By deferring the freeing of event trigger data to a kthread without ensuring proper synchronization, concurrent tracepoint handlers can access freed memory through an RCU‑linked list. This can lead to undefined behaviour, including kernel crashes. The flaw falls under CWE‑825.

Any Linux kernel build that includes the tracing subsystem and does not contain commit 61d445af0a7c can be vulnerable. The problem originates in the event_hist_trigger_free, event_hist_trigger_named_free and event_enable_trigger_free handlers, so any kernel exposing these triggers via tracepoints is potentially affected. No specific version list is supplied; any kernel prior to the commit that restores proper synchronization is at risk.

The CVSS score of 8.8 indicates high severity, while the EPSS score of < 1% suggests a low probability of exploitation. The vulnerability is not listed in CISA KEV. Based on the description, it is inferred that exploitation would typically require local or privileged access to trigger tracepoint handlers, and remote exploitation is unlikely. No public exploits have been reported. The potential for a kernel crash warrants timely remediation.