CVE-2026-99160

Not scored yetLast modified Oct 30, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Do not show buffer_meta for CPUs without a buffer

The per_cpu/cpuN/buffer_meta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpu_buffer in rbm_start().

Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.

Metrics

No CVSS score has been published yet.

Affected software

Source: the vendor's advisory (CNA). NVD analysis pending.

VendorProductVersions
LinuxLinux>= 950032ffcee7a43c960951940059afc5a2bdbcbc, < 445bc0e0ed7b3f69b78a0fd8d3a8fdb4e20bc379; >= 950032ffcee7a43c960951940059afc5a2bdbcbc, < 8512d0312cc0ea83ca4511b164c29a138bbb0c21; >= 950032ffcee7a43c960951940059afc5a2bdbcbc, < ae670c1a24fb5ffb167f26358cf47a5f0abbd670; >= 950032ffcee7a43c960951940059afc5a2bdbcbc, < 3f23cae09a4677a3f7c163a68388512cb231ff22
LinuxLinux6.12

References

Timeline

Published
Oct 28, 2026
Last modified
Oct 30, 2026
NVD status
Received

Related CVEs from 2026

CVE-2026-99161In the Linux kernel, the following vulnerability has been resolved: i2c: viai2c-wmt: Fix clock leak in wmt_i2c_probe() In wmt_i2c_probe(),CVE-2026-99162In the Linux kernel, the following vulnerability has been resolved: gpio: shared: fix use-after-free bug when adding shared proxies The GPCVE-2026-991637.8In the Linux kernel, the following vulnerability has been resolved: tracing/histograms: Reject non-stacktrace fields for synthetic stacktraCVE-2026-991647.8In the Linux kernel, the following vulnerability has been resolved: spi: imx: fix slab corruption from undersized DMA bounce buffers SinceCVE-2026-99165In the Linux kernel, the following vulnerability has been resolved: sctp: revalidate output stream after association connect wait When mesCVE-2026-99166In the Linux kernel, the following vulnerability has been resolved: net: rds: fix uninitialized trans dereference in CM event handler rds_CVE-2026-991677.8In the Linux kernel, the following vulnerability has been resolved: net/sched: fix use-after-free in __tcf_action_put() __tcf_action_put()CVE-2026-99168In the Linux kernel, the following vulnerability has been resolved: mshv_vtl: Check per-CPU register page before mmap Register-page setup CVE-2026-99169In the Linux kernel, the following vulnerability has been resolved: futex: Fix mm reuse handling for FUT_OFF_MMSHARED A FUT_OFF_MMSHARED fCVE-2026-99176.5Uninitialized Use in WebGL in Google Chrome on Android prior to 148.0.7778.216 allowed a remote attacker to obtain potentially sensitive infCVE-2026-991708.8In the Linux kernel, the following vulnerability has been resolved: namespace: a mount that copy_tree() leaves out can't take over a lock CVE-2026-99171In the Linux kernel, the following vulnerability has been resolved: ntfs3: free the sbi after a grace period If the "nocase" mount option
CVE-2026-99160: Unscored | Vulnix