CVE-2026-72012
tracing/osnoise: Call synchronize_rcu() when unregistering
- State
- Published
- Severity
- 7.8 High
- Published
- Aug 15, 2026
- Updated
- Oct 19, 2026
- Reserved
- Aug 9, 2026
Description
In the Linux kernel, the following vulnerability has been resolved:
tracing/osnoise: Call synchronize_rcu() when unregistering
This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Linux |
Weaknesses
- CWE-667 Improper Locking
Affected Products
| Product | Versions |
|---|---|
LinuxLinux |
|
LinuxLinux |
|
References
- https://git.kernel.org/stable/c/428cedade9b2cc8e48f00742df0cfd770e77a803
- https://git.kernel.org/stable/c/3c693635bb7b3a9b6645831a84fed2af46cdf249
- https://git.kernel.org/stable/c/38366140dc8ee3568c7f0191d517e117963bd580
- https://git.kernel.org/stable/c/fad36954b29592ce463254179c3043697678481f
- https://git.kernel.org/stable/c/dd0160a0842337f12e7694d68b184050afc6d3a4
- https://git.kernel.org/stable/c/fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.