CVE-2026-99219
Description
In the Linux kernel, the following vulnerability has been resolved: ftrace: Initialize modname and offset in print_rec() print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf(). Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480 This can be triggered by reading available_filter_functions while a module is being loaded or unloaded. Initialize both variables so a failed lookup skips the module name.
How to fix
- Linux Linux753d5cba113a52cb155428f4ea93a4b0148c4bf1, 0e5ff07be834abaf4280e1dca7f9591e339d0960, e2e6fb972bfec4a0551bc7c185bdb17f78f94997, 8932e5a4df110a25578728526bb5a3dbc849d8a2, 7271c064dd60d4456c5b90da757acd9420d06697, d97dba9ff13987d1fc415408557a54adde980311, e1f339ff3b83857b93baf8b88186275a413d445e or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < 753d5cba113a52cb155428f4ea93a4b0148c4bf1, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < 0e5ff07be834abaf4280e1dca7f9591e339d0960, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < e2e6fb972bfec4a0551bc7c185bdb17f78f94997, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < 8932e5a4df110a25578728526bb5a3dbc849d8a2, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < 7271c064dd60d4456c5b90da757acd9420d06697, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < d97dba9ff13987d1fc415408557a54adde980311, b39181f7c6907dc66ff937b74758671fa6ba430c ≤ v < e1f339ff3b83857b93baf8b88186275a413d445e, 5.19 | 753d5cba113a52cb155428f4ea93a4b0148c4bf1, 0e5ff07be834abaf4280e1dca7f9591e339d0960, e2e6fb972bfec4a0551bc7c185bdb17f78f94997, 8932e5a4df110a25578728526bb5a3dbc849d8a2, 7271c064dd60d4456c5b90da757acd9420d06697, d97dba9ff13987d1fc415408557a54adde980311, e1f339ff3b83857b93baf8b88186275a413d445e |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.