Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating modules in persistent instances trace_module_record() walks ftrace_trace_arrays from the module notifier without trace_types_lock. A concurrent rmdir of an instance removes it from the list and frees it under that lock, so a module load or unload can walk into a freed trace_array.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🆕 New CVE Linux kernel: use-after-free in tracing module notifier (CVE-2026-99238) A local attacker racing instance removal against module loads can trigger a use-after-free, crashing the kernel. No patch listed yet https://cve.now/CVE-2026-99238?utm_source=x&utm_medium=social&utm_campaign=cvedotnow&utm_content=critical