Buffer Overflow in Linux Kernel TIPC Node Management

CVE-2026-99246

What is CVE-2026-99246?

In the Linux kernel, a vulnerability affecting the TIPC (Transparent Inter-Process Communication) subsystem allows a race condition during trace event handling. Specifically, the trace event 'tipc_node_reset_links' may execute without acquiring the necessary node lock, leading to a potential 'use-after-free' scenario. This occurs when one CPU frees a link while another CPU attempts to dump link data, resulting in a dereferencing of a stale pointer. Proper synchronization through node locking is crucial to prevent such vulnerabilities from exposing systems to potential crashes or exploitations.

References