---
id: CVE-2026-99238
title: 'tracing: Hold trace_types_lock when updating modules in persistent instances'
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  tracing: Hold trace_types_lock when updating modules in persistent instances

  trace_module_record() walks ftrace_trace_arrays from the module notifier
  without trace_typ…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 <
    57408eac99b0d8a005796346d317d31f0ca4e07a
  - >-
    Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 <
    dab2bd4d67ad5eaa95019a9511f8d379401b5021
  - >-
    Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 <
    244c442f54601a24c86ad90572bf36fc3df41c5e
  - >-
    Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 <
    66877a312ae3c2c3d849e82e882f642ffd4ec3e2
  - Linux 6.15
published: '2026-11-02'
updated: '2026-11-03'
sourceUpdated: '2026-11-03T19:13:05.949Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-99238'
references:
  - url: 'https://git.kernel.org/stable/c/57408eac99b0d8a005796346d317d31f0ca4e07a'
  - url: 'https://git.kernel.org/stable/c/dab2bd4d67ad5eaa95019a9511f8d379401b5021'
  - url: 'https://git.kernel.org/stable/c/244c442f54601a24c86ad90572bf36fc3df41c5e'
  - url: 'https://git.kernel.org/stable/c/66877a312ae3c2c3d849e82e882f642ffd4ec3e2'
tags:
  - cve.org
epss: 0.0012
epssPercentile: 0.01846
ingestedAt: '2026-11-05T20:33:06.390Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

tracing: Hold trace_types_lock when updating modules in persistent instances

trace_module_record() walks ftrace_trace_arrays from the module notifier
without trace_types_lock. A concurrent rmdir of an instance removes it
from the list and frees it under that lock, so a module load or unload
can walk into a freed trace_array.

## Affected

- `Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 < 57408eac99b0d8a005796346d317d31f0ca4e07a`
- `Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 < dab2bd4d67ad5eaa95019a9511f8d379401b5021`
- `Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 < 244c442f54601a24c86ad90572bf36fc3df41c5e`
- `Linux >= 5f3719f697c3fdfae5cd6805f10ac7a04b0f4e43 < 66877a312ae3c2c3d849e82e882f642ffd4ec3e2`
- `Linux 6.15`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.