CVE-2026-99237: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when resetting last boot data from readers update_last_data_if_empty() is called from tracing_open() with O_TRUNC, tracing_read_pipe() and tracing_buffers_read() without trace_types_lock. Two readers can both pass the LAST_BOOT test and free module_delta twice, and a module notifier can update module_delta while it is being freed. Take trace_types_lock in those paths and keep the callers that already hold it on an unlocked variant.

Засегнати продукти

• Linux Linux: 32dc0042528d385d83bf458e4cf3a49c5110afea преди 92b69f6db640dadc0851762ee2e12db99f083cad; 32dc0042528d385d83bf458e4cf3a49c5110afea преди d6d991afe775ab7fcf89523a2502b7ca3be56ffd; 32dc0042528d385d83bf458e4cf3a49c5110afea преди 1f06cfe0b60a878619d1d8efe1cd0f515b7dc2aa; 32dc0042528d385d83bf458e4cf3a49c5110afea преди 5a6bd62f09147b49b31fd19d4eba122cb5f941a1
• Linux Linux: 6.16; преди 6.16; 6.18.60 до 6.18.*; 7.2.14 до 7.2.*; 7.3.1 до 7.3.*; от 7.4-rc1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99265
• CVE-2026-99261
• CVE-2026-99260

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-99237
• https://nvd.nist.gov/vuln/detail/CVE-2026-99237
• https://git.kernel.org/stable/c/92b69f6db640dadc0851762ee2e12db99f083cad
• https://git.kernel.org/stable/c/d6d991afe775ab7fcf89523a2502b7ca3be56ffd
• https://git.kernel.org/stable/c/1f06cfe0b60a878619d1d8efe1cd0f515b7dc2aa
• https://git.kernel.org/stable/c/5a6bd62f09147b49b31fd19d4eba122cb5f941a1