Memory Exposure Vulnerability in Linux Kernel Affects User Space Access

CVE-2026-99208

What is CVE-2026-99208?

A vulnerability in the Linux kernel's handling of OA buffers may allow unauthorized access to previously freed memory data. This issue arises from improper zeroing of ttm_bo_type_kernel buffers upon allocation, which can leak sensitive kernel memory contents when accessed by user space. Userspace applications that call mmap on these buffers can potentially access stale data, posing a risk of information disclosure. Proper mitigation involves ensuring that the OA buffer is explicitly zeroed during allocation to safeguard against such exposures.

References