CVE-2026-99219
ftrace: Initialize modname and offset in print_rec()
- Published
- Updated
- Reserved
- Assigned by
- Linux
Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf(). Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480 This can be triggered by reading available_filter_functions while a module is being loaded or unloaded. Initialize both variables so a failed lookup skips the module name.
Scores
No CVSS score yet: neither the CNA, CISA nor NVD has scored this CVE. NVD status: Received.
- EPSS (exploitation in 30 days)
- 0.17% · top 93% of all CVEs (6 Nov 2026)
The list uses the assigner's score when there is one, then CISA's, then NVD's: Not scored.
Affected products
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < 753d5cba113a52cb155428f4ea93a4b0148c4bf1
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < 0e5ff07be834abaf4280e1dca7f9591e339d0960
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < e2e6fb972bfec4a0551bc7c185bdb17f78f94997
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < 8932e5a4df110a25578728526bb5a3dbc849d8a2
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < 7271c064dd60d4456c5b90da757acd9420d06697
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < d97dba9ff13987d1fc415408557a54adde980311
- affected b39181f7c6907dc66ff937b74758671fa6ba430c – < e1f339ff3b83857b93baf8b88186275a413d445e
- affected 5.19
- unaffected < 5.19
- unaffected 6.1.191 – ≤ 6.1.*
- unaffected 6.6.161 – ≤ 6.6.*
- unaffected 6.12.115 – ≤ 6.12.*
- unaffected 6.18.60 – ≤ 6.18.*
- unaffected 7.2.14 – ≤ 7.2.*
- unaffected 7.3.1 – ≤ 7.3.*
- unaffected 7.4-rc1 – ≤ *
References (7)
- https://git.kernel.org/stable/c/753d5cba113a52cb155428f4ea93a4b0148c4bf1 (opens in a new tab)
- https://git.kernel.org/stable/c/0e5ff07be834abaf4280e1dca7f9591e339d0960 (opens in a new tab)
- https://git.kernel.org/stable/c/e2e6fb972bfec4a0551bc7c185bdb17f78f94997 (opens in a new tab)
- https://git.kernel.org/stable/c/8932e5a4df110a25578728526bb5a3dbc849d8a2 (opens in a new tab)
- https://git.kernel.org/stable/c/7271c064dd60d4456c5b90da757acd9420d06697 (opens in a new tab)
- https://git.kernel.org/stable/c/d97dba9ff13987d1fc415408557a54adde980311 (opens in a new tab)
- https://git.kernel.org/stable/c/e1f339ff3b83857b93baf8b88186275a413d445e (opens in a new tab)
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2026-99219)Record last updated .