CVE-2026-99237

A flaw was found in the Linux kernel's tracing subsystem. A race condition exists due to missing locking when resetting trace data during concurrent reader operations. A local attacker with access to tracing interfaces can exploit this vulnerability by performing concurrent file operations, triggering memory corruption such as a use-after-free or double-free condition. Successful exploitation could allow an attacker to escalate privileges, execute arbitrary code in the kernel, or cause a Denial of Service (DoS) by crashing the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.