Live › vulnerability › CVE-2026-59048
An incorrect bounds check in rb_cpu_init in trace.c allows an out-of-bounds read. A local user with no extra privileges can read memory they should not see, which is information disclosure only.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 20:35 UTC. All times on this page are UTC.
The sources do not name the affected product or version range; trace.c in rb_cpu_init suggests a kernel or runtime tracing component. Systems where local users can run code are the ones to look at. unknown
No product ranges from the sources yet.
Unknown from the sources.
No fix yet, per the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In rb_cpu_init of trace.c, there is a possible out-of-bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
This page as .md · .json · in your agent: get_signal("CVE-2026-59048")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.