CVE-2026-99237

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A race condition exists in the ftrace boot data handling. The update last data if empty() function is called from tracing open() with O TRUNC, tracing read pipe(), and tracing buffers read() without holding the trace types lock. This allows two concurrent readers to pass the LAST BOOT test and free module delta twice, or allows a module notifier to update module delta while it is being freed. This memory corruption can lead to a system crash or kernel memory corruption if an attacker reads trace data concurrently.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.