CVE-2026-99238

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the tracing module notifier. The trace module record() function iterates through ftrace trace arrays without holding the trace types lock. If a concurrent directory removal of an instance occurs, the instance is removed from the list and freed while under that lock, allowing a module load or unload operation to access a freed trace array. A local attacker can exploit this race condition to crash the kernel.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.