HomeDefectsLIN1022-40263
Fixed

LIN1022-40263 : Security Advisory - linux - CVE-2026-99237

Created: Nov 3, 2026    Updated: Nov 5, 2026
Resolved Date: Nov 3, 2026
Found In Version: 10.22.33.2
Fix Version: 10.22.33.11
Severity: Standard
Applicable for: Wind River Linux LTS 22
Component/s: Kernel

Description

In the Linux kernel, the following vulnerability has been resolved:  tracing: Hold trace_types_lock when resetting last boot data from readers  update_last_data_if_empty() is called from tracing_open() with O_TRUNC, tracing_read_pipe() and tracing_buffers_read() without trace_types_lock. Two readers can both pass the LAST_BOOT test and free module_delta twice, and a module notifier can update module_delta while it is being freed.  Take trace_types_lock in those paths and keep the callers that already hold it on an unlocked variant.