CVE-2026-98032

Received Received - Intake

Race Condition in Linux Kernel Tracing Subsystem

Publication date: 2026-09-25

Last updated on: 2026-10-15

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Fix subbuf resize races with trace_pipe_raw readers Concurrent subbuffer resizes may crash trace_pipe_raw readers or leak uninitialized memory to userspace due to stale size values. Modify ring_buffer_alloc_read_page() to handle the resizing of an existing buffer_data_read_page if necessary and add a new ring_buffer_read_page_size(). This new function enables ring-buffer buffer_data_read_page users to not call the racy ring_buffer_subbuf_size_get(). This makes the spare_size member of ftrace_buffer_info redundant. Finally, handle buffer_data_read_page/reader_page order discrepancy in ring_buffer_read_page(). On a mismatch simply copy manually the data to the buffer_data_read_page.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-25

Last Modified

2026-10-15

Generated

2026-10-16

AI Q&A

2026-09-25

EPSS Evaluated

2026-10-14

NVD

CVE-2026-98032

EUVD

EUVD-2026-86685

Affected Vendors & Products

Vendor	Product	Version / Range
linux	linux_kernel	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-UNKNOWN

Attack-Flow Graph

Executive Summary

This vulnerability in the Linux kernel involves a race condition during subbuffer resizing in the tracing subsystem. Concurrent resizes can crash trace_pipe_raw readers or expose uninitialized memory to userspace due to outdated size values.

Detection Guidance

This vulnerability is specific to the Linux kernel's tracing subsystem and may not have direct network detection methods. Check kernel logs for crashes or errors related to tracing or ring buffer operations. Commands like dmesg or journalctl -k may show relevant errors.

Impact Analysis

If exploited, this flaw could cause system crashes or allow unauthorized access to sensitive memory contents. Users relying on kernel tracing features may experience instability or data leaks.

Compliance Impact

This vulnerability does not directly affect compliance with GDPR, HIPAA, or similar standards as it pertains to a Linux kernel tracing mechanism rather than data privacy or security controls. The issue involves potential crashes or memory leaks in trace_pipe_raw readers due to race conditions during subbuffer resizing.

Mitigation Strategies

Update the Linux kernel to the latest stable version that includes the fix for this vulnerability. Monitor kernel logs for tracing-related errors after applying updates. If immediate patching is not possible, consider disabling tracing features if they are not critical to operations.

Hi! I’m here to help you understand CVE-2026-98032. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70