{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.1.187-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.105-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.1.9-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:12",
        "name": "linux-6.12"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.107-1~deb12u1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  tracing: Fix race between update_event_fields and, event_define_fields  The following sequence may leads race between event_define_fields() and update_event_fields():   CPU0 (loads module A)                      CPU1 (loads module B)  ===============================            ===============================  load_module(A)                             load_module(B)    notifier_call_chain                        notifier_call_chain      trace_module_notify                        trace_module_notify        mutex_lock(\u0026event_mutex)                   trace_event_update_all()          trace_module_add_events(A)                 down_write(\u0026trace_event_sem)             __register_event(call_A)               __add_event_to_tracers(call_A)                 event_define_fields(call_A)                   for each f:                         list_for_each_entry(field,                     list_add(\u0026f-\u003elink,                                    \u0026class-\u003efields, link)                              \u0026class-\u003efields)            field = class-\u003efields-\u003enext;  Where access to the class-\u003efields is not protected by the event_mutex in trace_event_update_all().  This produces the following panic:    Unable to handle kernel access ... at virtual address 0000000000000018    pc : update_event_fields+0xf8/0x368    Call trace:     update_event_fields+0xf8/0x368     trace_event_update_all+0x7c/0x2b4     trace_module_notify+0x4c/0x1dc     notifier_call_chain+0x84/0x168     blocking_notifier_call_chain_robust+0x64/0xd4     load_module+0x10c8/0x123c     __arm64_sys_finit_module+0x230/0x31c  Fix by taking event_mutex in trace_event_update_all() before trace_event_sem.",
  "id": "DEBIAN-CVE-2026-74636",
  "modified": "2026-09-19T21:47:34.315298083Z",
  "published": "2026-08-22T16:16:36.750Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-74636"
    }
  ],
  "upstream": [
    "CVE-2026-74636"
  ]
}