{
  "affected": [
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:13",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "6.12.111-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    },
    {
      "ecosystem_specific": {
        "urgency": "not yet assigned"
      },
      "package": {
        "ecosystem": "Debian:14",
        "name": "linux"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "0"
            },
            {
              "fixed": "7.2.6-1"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "details": "In the Linux kernel, the following vulnerability has been resolved:  perf/ftrace: Fix WARNING in __unregister_ftrace_function  perf_ftrace_function_unregister() unconditionally calls unregister_ftrace_function() without checking whether the ftrace_ops was ever successfully registered. This triggers a WARN_ON in __unregister_ftrace_function() when the ops doesn't have FTRACE_OPS_FL_ENABLED set.  This can happen during perf_event_alloc() error cleanup when perf_trace_destroy() is called via __free_event() on an event whose ftrace_ops registration failed or was already torn down by perf_try_init_event()'s err_destroy path.  The call path is:   perf_event_alloc() error cleanup     -\u003e __free_event()       -\u003e event-\u003edestroy() [tp_perf_event_destroy]         -\u003e perf_trace_destroy()           -\u003e perf_trace_event_close()             -\u003e TRACE_REG_PERF_CLOSE               -\u003e perf_ftrace_function_unregister()                 -\u003e unregister_ftrace_function()                   -\u003e __unregister_ftrace_function()                     -\u003e WARN_ON(!(ops-\u003eflags \u0026 FTRACE_OPS_FL_ENABLED))  Fix this by checking FTRACE_OPS_FL_ENABLED before attempting to unregister. If the ops is not enabled, just free the filter and return success.",
  "id": "DEBIAN-CVE-2026-97443",
  "modified": "2026-09-29T10:47:34.945933801Z",
  "published": "2026-09-24T17:17:22.550Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://security-tracker.debian.org/tracker/CVE-2026-97443"
    }
  ],
  "upstream": [
    "CVE-2026-97443"
  ]
}