Linux Kernel Vulnerability in Print Function Causes General Protection Fault

CVE-2026-99219

What is CVE-2026-99219?

The Linux kernel contains a vulnerability that occurs in the ftrace subsystem when the print_rec() function handles uninitialized variables during module operations. Specifically, when a module is being loaded or unloaded, the variables 'modname' and 'offset' may retain garbage values instead of legitimate data. This issue can result in a general protection fault (GPF) when 'modname' is dereferenced incorrectly, potentially leading to system crashes or instability. To mitigate this vulnerability, prompt initialization of these variables is required, ensuring that any failed lookup will not pass the module name checks.

References