Skip to content
CVE Tracker
Back

CVE-2026-99237

tracing: Hold trace_types_lock when resetting last boot data from readers

High7.8
Published
Updated
Reserved
Assigned by
Linux

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last boot data from readers update_last_data_if_empty() is called from tracing_open() with O_TRUNC, tracing_read_pipe() and tracing_buffers_read() without trace_types_lock. Two readers can both pass the LAST_BOOT test and free module_delta twice, and a module notifier can update module_delta while it is being freed. Take trace_types_lock in those paths and keep the callers that already hold it on an unlocked variant.

Scores

CVSS scores of CVE-2026-99237, by who scored it
Scored byCVSSScoreVector
LinuxCNA (assigner)3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Received3.1High7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS (exploitation in 30 days)
Not scored

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.8.

Affected products

  • Linux · Linux

    • affected 32dc0042528d385d83bf458e4cf3a49c5110afea – < 92b69f6db640dadc0851762ee2e12db99f083cad
    • affected 32dc0042528d385d83bf458e4cf3a49c5110afea – < d6d991afe775ab7fcf89523a2502b7ca3be56ffd
    • affected 32dc0042528d385d83bf458e4cf3a49c5110afea – < 1f06cfe0b60a878619d1d8efe1cd0f515b7dc2aa

  • Linux · Linux

    • affected 6.16
    • unaffected < 6.16
    • unaffected 6.18.60 – ≤ 6.18.*
    • unaffected 7.2.14 – ≤ 7.2.*
    • unaffected 7.3.1 – ≤ 7.3.*

References (3)

Sources

The same CVE in the primary databases and aggregators, to check against.

Record last updated .