Threats tagged 'ghsa-w7jm-33hw-fpp2'

CVE-2026-99237 is a high-severity vulnerability in the Linux kernel tracing subsystem. It involves improper locking when resetting last boot data from readers, which can lead to double freeing of memory and concurrent modification issues. The flaw arises because update_last_data_if_empty() is called without holding the required trace_types_lock in certain code paths, allowing race conditions between readers and module notifiers.