Vulnerability in Linux Kernel Affecting Module Updates

CVE-2026-99238

What is CVE-2026-99238?

A vulnerability exists in the Linux kernel related to the handling of module updates in persistent instances. Specifically, the trace_module_record() function traverses the ftrace_trace_arrays without holding the trace_types_lock, potentially leading to a use-after-free situation. If an instance is concurrently removed via rmdir during a module load or unload, it may result in accessing freed memory, which can compromise system stability and security. Adequate locking mechanisms must be enforced to prevent these unsafe conditions.

References