An incorrect pointer assignment in the Linux kernel tracing subsystem causes the kernel to store an existing histogram pointer instead of a newly created one. When a target reference to this histogram is removed, the kernel dereferences freed memory, resulting in a use‑after‑free condition. This kernel memory corruption can lead to a system crash; the possibility of arbitrary code execution is inferred but not explicitly confirmed in the supplied description.

The flaw exists in any Linux kernel build that contains the original tracing code and does not yet include the patch that corrects the histogram assignment. No specific version range is provided, so every kernel compiled without the fixed commit should be considered affected.

The CVSS score of 7.8 classifies this vulnerability as high severity. EPSS data is not available, and the flaw is not listed in the CISA KEV catalog, indicating that no widespread exploitation has been reported. The attack vector is inferred to be local, requiring the attacker to create and delete trace events from user space. If the use‑after‑free can be triggered, it poses a risk of denial of service, privilege escalation, or, under certain conditions, arbitrary code execution.