CVE-2026-99219

A flaw was found in the Linux kernel's ftrace (function tracing) subsystem. This vulnerability allows a local user to cause a Denial of Service (DoS) by crashing the system. The issue occurs when reading tracing filter information while a kernel module is simultaneously loaded or unloaded, causing the kernel to dereference uninitialized memory following a failed symbol lookup.

This vulnerability is rated as Moderate severity because it requires local access and precise timing during concurrent kernel module operations to induce a system crash. In typical Red Hat deployments, access to the kernel tracing pseudo-filesystem is restricted to administrative users, significantly reducing exposure to unprivileged accounts. Additionally, the flaw only leads to a local denial of service without exposing sensitive information or enabling unauthorized privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.