Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2026-99238 Details

Description

In the Linux kernel, the following vulnerability has been resolved: tracing: Hold trace_types_lock when updating modules in persistent instances trace_module_record() walks ftrace_trace_arrays from the module notifier without trace_types_lock. A concurrent rmdir of an instance removes it from the list and frees it under that lock, so a module load or unload can walk into a freed trace_array.

Metrics

CVSS 3.x Severity and Vector Strings:

CNA: kernel.orgCVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://git.kernel.org/stable/c/244c442f54601a24c86ad90572bf36fc3df41c5e kernel.org
https://git.kernel.org/stable/c/57408eac99b0d8a005796346d317d31f0ca4e07a kernel.org
https://git.kernel.org/stable/c/66877a312ae3c2c3d849e82e882f642ffd4ec3e2 kernel.org
https://git.kernel.org/stable/c/dab2bd4d67ad5eaa95019a9511f8d379401b5021 kernel.org

Weakness Enumeration

No weakness enumeration is available for this CVE.

Affected Products

No affected product data is available for this CVE.

Change History

2 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2026-99238
NVD Published Date:
Nov 2, 2026
NVD Last Modified:
Nov 3, 2026
Source:
kernel.org
CVE-2026-99238 Details - Not Deferred