CVE-2026-99204 is a use-after-free vulnerability in the Linux kernel's OCFS2 Distributed Lock Manager (DLM) debugfs interface. The flaw occurs because the recovery participant list is not properly protected during debugfs reads, allowing concurrent access to freed memory. This issue was detected by Kernel Address Sanitizer (KASAN) and involves improper locking between dlm->spinlock and dlm_reco_state_lock. The vulnerability has been resolved by adding appropriate locking to protect the recovery list during debugfs traversal.