{"id":"CVE-2026-99238","published":"2026-11-02T16:17:49.380","lastModified":"2026-11-02T16:17:49.380","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing: Hold trace_types_lock when updating modules in persistent instances\n\ntrace_module_record() walks ftrace_trace_arrays from the module notifier\nwithout trace_types_lock. A concurrent rmdir of an instance removes it\nfrom the list and frees it under that lock, so a module load or unload\ncan walk into a freed trace_array.","cvssScore":7.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/244c442f54601a24c86ad90572bf36fc3df41c5e","tags":[]},{"url":"https://git.kernel.org/stable/c/57408eac99b0d8a005796346d317d31f0ca4e07a","tags":[]},{"url":"https://git.kernel.org/stable/c/dab2bd4d67ad5eaa95019a9511f8d379401b5021","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}