CVE-2026-68146
kernel: ftrace: Add global mutex to serialize trace_parser access
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · August 10, 2026
Updated · August 31, 2026
Description
A flaw was found in the Linux kernel's ftrace tracing subsystem. When a userspace program opens a trace file descriptor and shares it across multiple threads, concurrent write operations can lead to a race condition in the trace_parser structure. This can result in corrupted input or undefined behavior within the kernel, potentially impacting system stability.
Statement
This issue affects ftrace when a trace fd is shared across threads. Concurrent writes race on the per-fd trace_parser without serialization. Systems not using shared trace fds are not affected.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-820 · Missing Synchronization