Null Pointer Vulnerability in Linux Kernel Trace Buffer Initialization

CVE-2026-99247

What is CVE-2026-99247?

A flaw in the Linux kernel's handling of trace buffer allocation can permit a null pointer dereference during early system boot. When tracing is disabled, if an allocation for trace buffers fails, the system erroneously continues initialization routines that reference uninitialized trace events. This results in a crash with a null pointer dereference error, disrupting system stability and security. A fix has been implemented to halt further initialization when tracing fails, ensuring the integrity of the boot process.

References