CVE-2026-99237
Gravedad CVSS v3.1:
ALTA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
02/11/2026
Última modificación:
03/11/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
tracing: Hold trace_types_lock when resetting last boot data from readers<br />
<br />
update_last_data_if_empty() is called from tracing_open() with O_TRUNC,<br />
tracing_read_pipe() and tracing_buffers_read() without trace_types_lock.<br />
Two readers can both pass the LAST_BOOT test and free module_delta<br />
twice, and a module notifier can update module_delta while it is being<br />
freed.<br />
<br />
Take trace_types_lock in those paths and keep the callers that already<br />
hold it on an unlocked variant.
Impacto
Puntuación base 3.x
7.80
Gravedad 3.x
ALTA