CVE record · CVE-2026-97920

tracing: Keep the entry count when the histogram stats allocation fails

No CVSS scoreEPSS 0.0021 · 10th percentile

Published by the CVE Program (CNA: Linux) at 25 Sept 2026, 10:22 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
VendorProductVersions
Linux Linux
  • affected 93454d1a306ea975294b861d32ffa1e44b20c733 to before 89c978d67ad01ce28223944cc58e95feea177b35 git
  • affected abaa5258ce5e5887a9de049f50a85dc023391a1c to before fe05eeed27128e17d38dbc0af02e4470bcecda89 git
  • affected abaa5258ce5e5887a9de049f50a85dc023391a1c to before 9bd8321f5370295d1ae96dd17d43be3c9edd441b git
  • affected abaa5258ce5e5887a9de049f50a85dc023391a1c to before c80b2a8067d58ff7d268ceef781c68b37a16c321 git
  • affected abaa5258ce5e5887a9de049f50a85dc023391a1c to before 17e87ce55f877efff1b08fe509e8bf91378cbbc9 git
  • affected abaa5258ce5e5887a9de049f50a85dc023391a1c to before 06f5634ec5584954177f9a22e36b3bfb398a971b git
  • affected 6.1.23 to before 6.1.189 semver
Other versions: unaffected
Linux Linux
  • affected 6.2
  • unaffected before 6.2 semver
  • unaffected 6.1.189 to 6.1.*, inclusive semver
  • unaffected 6.6.158 to 6.6.*, inclusive semver
  • unaffected 6.12.111 to 6.12.*, inclusive semver
  • unaffected 6.18.53 to 6.18.*, inclusive semver
  • unaffected 7.2.7 to 7.2.*, inclusive semver
  • unaffected 7.3 to *, inclusive original_commit_for_fix
Other versions: affected
Identifiers
CVE-2026-97920
CNA
Linux
Published
25 Sept 2026
Updated
19 Oct 2026

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

No source has published a CVSS score for this record yet.

  • CISA KEV Not listed.
  • EPSS 0.0021, the 10th percentile, on 12 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 25 Sept 2026. New records show when each source confirmed them.

Sources

References from the CNA

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.