The vulnerability is a race condition in the Linux kernel tracing subsystem that causes a WARN_ON_ONCE warning when a histogram trigger is attached to an event file that has a filter applied but the trigger has not yet been attached. The bug occurs because the event is written to a per‑CPU temporary buffer rather than the ring buffer, preventing the commit counter from incrementing. When the trigger later processes the buffered event, the timestamp function observes a zero commit counter and logs a warning while recording a bogus timestamp. The flaw does not provide an attacker with direct code execution or privilege escalation but corrupts kernel tracing data, potentially affecting monitoring, debugging or forensic analysis.

This defect affects the Linux kernel. No specific kernel version range is listed in the available data; thus any kernel distribution that has not applied the commit introducing tracing_event_time_stamp() could be impacted.

The EPSS score is not available, and the vulnerability is not listed in the CISA KEV catalog, indicating no known public exploitation. The CVSS score is not disclosed, so the severity cannot be quantified. The risk is therefore primarily limited to the integrity of kernel tracing data rather than a conventional security threat. Users should evaluate whether they rely on hist triggers for critical operational visibility.