Riskcovery

CVE-2026-99160

ring-buffer: Do not show buffer_meta for CPUs without a buffer

State
Published
Severity
Not scored
Published
Oct 28, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

ring-buffer: Do not show buffer_meta for CPUs without a buffer

The per_cpu/cpuN/buffer_meta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpu_buffer in rbm_start().

Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 950032ffcee7a43c960951940059afc5a2bdbcbc to before 445bc0e0ed7b3f69b78a0fd8d3a8fdb4e20bc379Affected
  • 950032ffcee7a43c960951940059afc5a2bdbcbc to before 8512d0312cc0ea83ca4511b164c29a138bbb0c21Affected
  • 950032ffcee7a43c960951940059afc5a2bdbcbc to before ae670c1a24fb5ffb167f26358cf47a5f0abbd670Affected
  • 950032ffcee7a43c960951940059afc5a2bdbcbc to before 3f23cae09a4677a3f7c163a68388512cb231ff22Affected
LinuxLinux
  • 6.12Affected
  • before 6.12Not affected
  • 6.12.115 through 6.12.*Not affected
  • 6.18.59 through 6.18.*Not affected
  • 7.2.13 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.