# tracing: Unregister field variable histograms when the command fails

CVE record · `CVE-2026-99234`

- **Identifiers:** `CVE-2026-99234`
- **State:** Confirmed
- **Severity:** No CVSS score
- **Critical:** No
- **CNA:** Linux
- **Technologies:** [Linux kernel](https://agentprime.io/advisories/technology/linux-kernel.md)
- **Published:** 2 Nov 2026
- **Updated:** 3 Nov 2026
- **Reviewed by a person:** No

Published by the CVE Program (CNA: Linux) at 2 Nov 2026, 16:06 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

## Affected products, as the CNA wrote them

- Vendor: Linux. Product: Linux.
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before f21351d1c4cdcc6a68f03636a407c2af1a5e1e10` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before dba0f492703956801149cc70b39d2650a37995c3` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before a3d7ffd2409700748a495b645948fef48199206e` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before aae0ccd7326eef78dcdefffef3d1253e6f0615ca` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before 8482ec5b65f606d5bbcec518e0afc69ad65ca414` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before 431959fc76456cbba539279fe8967aa9391e6f23` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before 5afb9317e2eeb1c7021a82995ce244fda5a4bd4f` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before d0090baf02dd08f6e909f36f0ad54a4e80f5e79b` (git)
  - affected: `02205a6752f223779a1b0e9e8ffacbea6e717851 to before 91c14d6c13096091c56304120aaa26e479130b8b` (git)
  - Other versions: unaffected
- Vendor: Linux. Product: Linux.
  - affected: `4.17`
  - unaffected: `before 4.17` (semver)
  - unaffected: `5.10.273 to 5.10.*, inclusive` (semver)
  - unaffected: `5.15.224 to 5.15.*, inclusive` (semver)
  - unaffected: `6.1.191 to 6.1.*, inclusive` (semver)
  - unaffected: `6.6.161 to 6.6.*, inclusive` (semver)
  - unaffected: `6.12.115 to 6.12.*, inclusive` (semver)
  - unaffected: `6.18.60 to 6.18.*, inclusive` (semver)
  - unaffected: `7.2.14 to 7.2.*, inclusive` (semver)
  - unaffected: `7.3.1 to 7.3.*, inclusive` (semver)
  - unaffected: `7.4-rc1 to *, inclusive` (original_commit_for_fix)
  - Other versions: affected

## Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

## Severity and exploitation

No source has published a CVSS score for this record yet.

- **CISA KEV:** Not listed.
- **EPSS:** 0.0018, the 7th percentile, on 6 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

## Timeline

- 2 Nov 2026, 16:06 UTC: [Confirmed by the CVE List](https://www.cve.org/CVERecord?id=CVE-2026-99234)
- 2 Nov 2026, 16:12 UTC: First seen by agentprime
- 2 Nov 2026, 16:17 UTC: [Confirmed by NVD](https://nvd.nist.gov/vuln/detail/CVE-2026-99234)

## Sources

- [CVE List: CVE-2026-99234](https://www.cve.org/CVERecord?id=CVE-2026-99234)
- [NVD: CVE-2026-99234](https://nvd.nist.gov/vuln/detail/CVE-2026-99234)

### References from the CNA

- <https://git.kernel.org/stable/c/f21351d1c4cdcc6a68f03636a407c2af1a5e1e10>
- <https://git.kernel.org/stable/c/dba0f492703956801149cc70b39d2650a37995c3>
- <https://git.kernel.org/stable/c/a3d7ffd2409700748a495b645948fef48199206e>
- <https://git.kernel.org/stable/c/aae0ccd7326eef78dcdefffef3d1253e6f0615ca>
- <https://git.kernel.org/stable/c/8482ec5b65f606d5bbcec518e0afc69ad65ca414>
- <https://git.kernel.org/stable/c/431959fc76456cbba539279fe8967aa9391e6f23>
- <https://git.kernel.org/stable/c/5afb9317e2eeb1c7021a82995ce244fda5a4bd4f>
- <https://git.kernel.org/stable/c/d0090baf02dd08f6e909f36f0ad54a4e80f5e79b>
- <https://git.kernel.org/stable/c/91c14d6c13096091c56304120aaa26e479130b8b>

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.

## Check whether this affects you

This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it. Compare the affected versions above with what you run.

- With the agentprime MCP server (<https://api.agentprime.io/mcp>), `get_advisory` returns this record and `search_advisories` finds related ones. Setup: <https://agentprime.io/mcp.md>
- As JSON: <https://api.agentprime.io/v1/advisories/CVE-2026-99234>
- Everything that needs attention now: <https://agentprime.io/advisories/critical.md>

---

The web page: <https://agentprime.io/advisories/CVE-2026-99234/>. Everything for agents: <https://agentprime.io/llms.txt>.
