CVE-2026-74636: tracing: Fix race between update_event_fields and, event_define_fields

mediumCVSS 4.1CVE-2026-74636

CSIRTS triage

vendor: Linux product: Linux kernel Memory corruption

What: A race condition exists between event field update and event definition field operations in the kernel tracing subsystem.
Who is affected: Systems running vulnerable Linux kernel versions with kernel tracing enabled.
Urgency: Medium priority; not currently exploited but race conditions can corrupt tracing state or cause crashes.
Action: Apply kernel patch serializing event field updates and definitions in kernel/trace or update to patched kernel version.

AI-assisted analysis generated from the source advisory — verify against the original.

⚡ Watch Linux kernel

Get an email when a new Linux kernel advisory drops — max one per day, one-click unsubscribe.

Details

Source: Microsoft Security Response Center (INTL · vendor-psirt · site)
Severity: medium — CVSS 4.1
Published: 2026-08-11
Exploitation: Not in CISA KEV at last sync

Original advisory: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-74636

Exploitation outlook

EPSS (FIRST.org) estimates each CVE’s probability of exploitation in the next 30 days — here is the CSIRTS.com read on those numbers.

Low exploitation riskCVE-2026-746360.17% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 7% of all EPSS-scored CVEs.

Referenced CVEs

CVE	CSIRTS overview	External
CVE-2026-74636	coverage & exploitation status	NVD · CVE.org

Same CVEs, other sources

How other CERTs, PSIRTs and databases cover the vulnerabilities in this advisory.

Recent advisories for tracing

A cluster of recent advisories against the same product widens the attack surface — attackers routinely chain freshly published CVEs on one product, so review these together.

lowCVE-2026-79777: rclone before v1.75.0 includes full Go stack traces in RC API error responses when panics occu…nvd · 2026-08-25
unknownCVE-2026-74636: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix race between …nvd · 2026-08-22
unknownCVE-2026-74633: In the Linux kernel, the following vulnerability has been resolved: tracing: Fix NULL pointer …nvd · 2026-08-22
mediumCVE-2026-59323: An application using Micrometer Tracing with W3C baggage propagation in the Brave bridge is vu…nvd · 2026-08-21
unknownCVE-2026-58086: As an inadvertent side effect of an unrelated code change, PRIV_KTRACE was always denied to a …nvd · 2026-08-19
highCVE-2026-70734: Vulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supporte…nvd · 2026-08-18