Linux Kernel ftrace: Uninitialized modname/offset in print_rec()
CVE-2026-99219 Published on November 2, 2026
ftrace: Initialize modname and offset in print_rec()
In the Linux kernel, the following vulnerability has been resolved:
ftrace: Initialize modname and offset in print_rec()
print_rec() leaves 'modname' and 'offset' uninitialized and
kallsyms_lookup() only sets them on success. When the lookup fails like
when a module is being loaded or unloaded, 'modname' holds a garbage
value, passes the 'if (modname)' check, and is dereferenced by
seq_printf().
Oops: general protection fault
RIP: 0010:string+0x48/0xe0
Call Trace:
vsnprintf+0x1f5/0x650
seq_printf+0x8e/0xb0
print_rec+0x6c/0xc0
t_show+0x4c/0x440
seq_read_iter+0x119/0x480
This can be triggered by reading available_filter_functions while a
module is being loaded or unloaded.
Initialize both variables so a failed lookup skips the module name.
Products Associated with CVE-2026-99219
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below 753d5cba113a52cb155428f4ea93a4b0148c4bf1 is affected.
- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below 0e5ff07be834abaf4280e1dca7f9591e339d0960 is affected.
- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below e2e6fb972bfec4a0551bc7c185bdb17f78f94997 is affected.
- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below 8932e5a4df110a25578728526bb5a3dbc849d8a2 is affected.
- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below 7271c064dd60d4456c5b90da757acd9420d06697 is affected.
- Version b39181f7c6907dc66ff937b74758671fa6ba430c and below d97dba9ff13987d1fc415408557a54adde980311 is affected.
- Version 5.19 is affected.
- Before 5.19 is unaffected.
- Version 6.1.191, <= 6.1.* is unaffected.
- Version 6.6.161, <= 6.6.* is unaffected.
- Version 6.12.115, <= 6.12.* is unaffected.
- Version 6.18.60, <= 6.18.* is unaffected.
- Version 7.2.14, <= 7.2.* is unaffected.
- Version 7.3.1, <= 7.3.* is unaffected.