Live › vulnerability › CVE-2026-99160
Go to dashboardThe Linux kernel's ring buffer tracing interface creates a buffer_meta file for every possible CPU, including CPUs that never came online. Reading one of those files dereferences a NULL buffer pointer, which crashes the kernel.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 11:32 UTC. All times on this page are UTC.
No product ranges from the sources yet.
Unknown from the sources.
Unknown from the sources.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Do not show buffer_meta for CPUs without a buffer
The per_cpu/cpuN/buffer_meta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpu_buffer in rbm_start().
Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.
This page as .md · .json · in your agent: get_signal("CVE-2026-99160")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.