The Linux kernel contains a use‑after‑free flaw in the tracing subsystem. When a kernel module is loaded or unloaded, trace_module_record() iterates over ftrace_trace_arrays without holding trace_types_lock. If a concurrent removal of an instance frees the trace_array under that lock, the loading or unloading path can walk into the freed memory. This kernel memory corruption can be leveraged by a local attacker to gain escalated privileges or to crash the system.

Linux kernel (all versions impacted by the described race condition). No version details were supplied, so any currently running kernel should be treated as potentially vulnerable until a patch becomes available.

The flaw has a CVSS score of 7.8, indicating high severity. EPSS data is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is a local process that can load or unload kernel modules. Exploitation would require an attacker with sufficient permissions to manipulate the kernel module notifier, potentially enabling privilege escalation or denial of service.