CVE-2026-99160

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer_meta for CPUs without a buffer The per_cpu/cpuN/buffer_meta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpu_buffer in rbm_start(). Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedOct 28, 2026
First seenNov 4, 2026

How to fix

Update
  • Linux Linux445bc0e0ed7b3f69b78a0fd8d3a8fdb4e20bc379, 8512d0312cc0ea83ca4511b164c29a138bbb0c21, ae670c1a24fb5ffb167f26358cf47a5f0abbd670, 3f23cae09a4677a3f7c163a68388512cb231ff22 or later

Affected products

ProductAffected versionsFixed in
Linux Linux950032ffcee7a43c960951940059afc5a2bdbcbc ≤ v < 445bc0e0ed7b3f69b78a0fd8d3a8fdb4e20bc379, 950032ffcee7a43c960951940059afc5a2bdbcbc ≤ v < 8512d0312cc0ea83ca4511b164c29a138bbb0c21, 950032ffcee7a43c960951940059afc5a2bdbcbc ≤ v < ae670c1a24fb5ffb167f26358cf47a5f0abbd670, 950032ffcee7a43c960951940059afc5a2bdbcbc ≤ v < 3f23cae09a4677a3f7c163a68388512cb231ff22, 6.12445bc0e0ed7b3f69b78a0fd8d3a8fdb4e20bc379, 8512d0312cc0ea83ca4511b164c29a138bbb0c21, ae670c1a24fb5ffb167f26358cf47a5f0abbd670, 3f23cae09a4677a3f7c163a68388512cb231ff22

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.