PULSE
FEED
← Todos os CVEs
CVE Watch3 de nov. de 2026

CVE-2026-99219

In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leave

CVSS

—

Sem CVSS

EPSS

0.2%

p7

KEV

—

Exploit Today

2

0-100

Publicado: 2 de nov. de 2026 · Última mod.: 3 de nov. de 2026

EPSS · 30d
0.2%EPSS · 30 dias0.2%
2026-11-032026-11-07
Descrição técnica

In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf(). Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480 This can be triggered by reading available_filter_functions while a module is being loaded or unloaded. Initialize both variables so a failed lookup skips the module name.

Referências oficiais
CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.