CVE-2026-99237
tracing: Hold trace_types_lock when resetting last boot data from readers
CVSS Score
7.8
EPSS Score
0.0%
EPSS Percentile
0th
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last boot data from readers update_last_data_if_empty() is called from tracing_open() with O_TRUNC, tracing_read_pipe() and tracing_buffers_read() without trace_types_lock. Two readers can both pass the LAST_BOOT test and free module_delta twice, and a module notifier can update module_delta while it is being freed. Take trace_types_lock in those paths and keep the callers that already hold it on an unlocked variant.
| Vendor | linux |
| Product | linux |
| Ecosystems | |
| Industries | Technology |
| Published | Nov 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for linux linux
Be the first to know when new high vulnerabilities affecting linux linux are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Linux / Linux
32dc0042528d385d83bf458e4cf3a49c5110afea < 92b69f6db640dadc0851762ee2e12db99f083cad 32dc0042528d385d83bf458e4cf3a49c5110afea < d6d991afe775ab7fcf89523a2502b7ca3be56ffd 32dc0042528d385d83bf458e4cf3a49c5110afea < 1f06cfe0b60a878619d1d8efe1cd0f515b7dc2aa
Linux / Linux
6.16