CVE-2026-99219
Received Received - Intake

Kernel Memory Corruption in ftrace Module

Publication date: 2026-11-02

Last updated on: 2026-11-02

Assigner: kernel.org

Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf(). Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480 This can be triggered by reading available_filter_functions while a module is being loaded or unloaded. Initialize both variables so a failed lookup skips the module name.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-02
Last Modified
2026-11-02
Generated
2026-11-02
AI Q&A
2026-11-02
EPSS Evaluated
N/A
NVD
CVE-2026-99219

Affected Vendors & Products

Showing 7 associated CPEs
Vendor Product Version / Range
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux b39181f7c6907dc66ff937b74758671fa6ba430c
Linux Linux 5.19

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a Linux kernel vulnerability where the function print_rec() fails to initialize two variables, modname and offset. When kallsyms_lookup() fails to find a module, these uninitialized variables may contain garbage values. The function then incorrectly passes an if check and attempts to use the garbage value, leading to a general protection fault and system crash.

Detection Guidance

This vulnerability is specific to the Linux kernel's ftrace functionality and may cause a general protection fault when reading available_filter_functions during module load/unload. Detection requires checking kernel logs for oops or general protection fault errors related to ftrace or module operations.

Impact Analysis

This vulnerability can cause a system crash (kernel oops) when reading available_filter_functions during module loading or unloading. It may lead to denial of service, data corruption, or require a system reboot to recover.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it is a low-level kernel issue causing a general protection fault. It may indirectly impact systems handling sensitive data if it leads to crashes during module operations, but no specific compliance impact is documented.

Mitigation Strategies

Apply the latest Linux kernel update that includes the fix for this issue. Monitor kernel logs for ftrace-related errors and avoid operations that trigger module loading/unloading during critical system tasks.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99219. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...