{"history":[{"alert":0,"cve":"CVE-2026-99219","id":23527,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.00173, \"percentile\": 0.0681}"},{"alert":0,"cve":"CVE-2026-99219","id":21132,"kind":"epss","observed_at":1794392402,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.00173, \"percentile\": 0.0679}"},{"alert":1,"cve":"CVE-2026-99219","id":20991,"kind":"cna","observed_at":1794392402,"payload":"{\"containers\": {\"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"product\": \"Linux\", \"programFiles\": [\"kernel/trace/ftrace.c\"], \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"versions\": [{\"lessThan\": \"753d5cba113a52cb155428f4ea93a4b0148c4bf1\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"0e5ff07be834abaf4280e1dca7f9591e339d0960\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"e2e6fb972bfec4a0551bc7c185bdb17f78f94997\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"8932e5a4df110a25578728526bb5a3dbc849d8a2\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"7271c064dd60d4456c5b90da757acd9420d06697\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"d97dba9ff13987d1fc415408557a54adde980311\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}, {\"lessThan\": \"e1f339ff3b83857b93baf8b88186275a413d445e\", \"status\": \"affected\", \"version\": \"b39181f7c6907dc66ff937b74758671fa6ba430c\", \"versionType\": \"git\"}]}, {\"defaultStatus\": \"affected\", \"product\": \"Linux\", \"programFiles\": [\"kernel/trace/ftrace.c\"], \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\", \"vendor\": \"Linux\", \"versions\": [{\"status\": \"affected\", \"version\": \"5.19\"}, {\"lessThan\": \"5.19\", \"status\": \"unaffected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.1.*\", \"status\": \"unaffected\", \"version\": \"6.1.191\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.6.*\", \"status\": \"unaffected\", \"version\": \"6.6.161\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.12.*\", \"status\": \"unaffected\", \"version\": \"6.12.115\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"6.18.*\", \"status\": \"unaffected\", \"version\": \"6.18.60\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.2.*\", \"status\": \"unaffected\", \"version\": \"7.2.14\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"7.3.*\", \"status\": \"unaffected\", \"version\": \"7.3.1\", \"versionType\": \"semver\"}, {\"lessThanOrEqual\": \"*\", \"status\": \"unaffected\", \"version\": \"7.4-rc1\", \"versionType\": \"original_commit_for_fix\"}]}], \"cpeApplicability\": [{\"nodes\": [{\"cpeMatch\": [{\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.1.191\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.6.161\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.12.115\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"6.18.60\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.2.14\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.3.1\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}, {\"criteria\": \"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*\", \"versionEndExcluding\": \"7.4-rc1\", \"versionStartIncluding\": \"5.19\", \"vulnerable\": true}], \"negate\": false, \"operator\": \"OR\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"In the Linux kernel, the following vulnerability has been resolved:\\n\\nftrace: Initialize modname and offset in print_rec()\\n\\nprint_rec() leaves 'modname' and 'offset' uninitialized and\\nkallsyms_lookup() only sets them on success. When the lookup fails like\\nwhen a module is being loaded or unloaded, 'modname' holds a garbage\\nvalue, passes the 'if (modname)' check, and is dereferenced by\\nseq_printf().\\n\\n  Oops: general protection fault\\n  RIP: 0010:string+0x48/0xe0\\n  Call Trace:\\n   vsnprintf+0x1f5/0x650\\n   seq_printf+0x8e/0xb0\\n   print_rec+0x6c/0xc0\\n   t_show+0x4c/0x440\\n   seq_read_iter+0x119/0x480\\n\\nThis can be triggered by reading available_filter_functions while a\\nmodule is being loaded or unloaded.\\n\\nInitialize both variables so a failed lookup skips the module name.\"}], \"providerMetadata\": {\"dateUpdated\": \"2026-11-03T19:12:54.203Z\", \"orgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"shortName\": \"Linux\"}, \"references\": [{\"url\": \"https://git.kernel.org/stable/c/753d5cba113a52cb155428f4ea93a4b0148c4bf1\"}, {\"url\": \"https://git.kernel.org/stable/c/0e5ff07be834abaf4280e1dca7f9591e339d0960\"}, {\"url\": \"https://git.kernel.org/stable/c/e2e6fb972bfec4a0551bc7c185bdb17f78f94997\"}, {\"url\": \"https://git.kernel.org/stable/c/8932e5a4df110a25578728526bb5a3dbc849d8a2\"}, {\"url\": \"https://git.kernel.org/stable/c/7271c064dd60d4456c5b90da757acd9420d06697\"}, {\"url\": \"https://git.kernel.org/stable/c/d97dba9ff13987d1fc415408557a54adde980311\"}, {\"url\": \"https://git.kernel.org/stable/c/e1f339ff3b83857b93baf8b88186275a413d445e\"}], \"title\": \"ftrace: Initialize modname and offset in print_rec()\", \"x_generator\": {\"engine\": \"bippy-1.2.0\"}}}, \"cveMetadata\": {\"assignerOrgId\": \"416baaa9-dc9f-4396-8d5f-8c081fb06d67\", \"assignerShortName\": \"Linux\", \"cveId\": \"CVE-2026-99219\", \"datePublished\": \"2026-11-02T16:06:31.529Z\", \"dateReserved\": \"2026-09-25T10:25:14.401Z\", \"dateUpdated\": \"2026-11-03T19:12:54.203Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.2\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/ftrace.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"753d5cba113a52cb155428f4ea93a4b0148c4bf1","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"0e5ff07be834abaf4280e1dca7f9591e339d0960","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"e2e6fb972bfec4a0551bc7c185bdb17f78f94997","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"8932e5a4df110a25578728526bb5a3dbc849d8a2","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"7271c064dd60d4456c5b90da757acd9420d06697","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"d97dba9ff13987d1fc415408557a54adde980311","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"e1f339ff3b83857b93baf8b88186275a413d445e","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/trace/ftrace.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.191","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.161","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"},{"lessThanOrEqual":"7.3.*","status":"unaffected","version":"7.3.1","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.4-rc1","versionType":"original_commit_for_fix"}]}],"cna":{"containers":{"cna":{"affected":[{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/ftrace.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"753d5cba113a52cb155428f4ea93a4b0148c4bf1","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"0e5ff07be834abaf4280e1dca7f9591e339d0960","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"e2e6fb972bfec4a0551bc7c185bdb17f78f94997","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"8932e5a4df110a25578728526bb5a3dbc849d8a2","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"7271c064dd60d4456c5b90da757acd9420d06697","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"d97dba9ff13987d1fc415408557a54adde980311","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"},{"lessThan":"e1f339ff3b83857b93baf8b88186275a413d445e","status":"affected","version":"b39181f7c6907dc66ff937b74758671fa6ba430c","versionType":"git"}]},{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/trace/ftrace.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"5.19"},{"lessThan":"5.19","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.191","versionType":"semver"},{"lessThanOrEqual":"6.6.*","status":"unaffected","version":"6.6.161","versionType":"semver"},{"lessThanOrEqual":"6.12.*","status":"unaffected","version":"6.12.115","versionType":"semver"},{"lessThanOrEqual":"6.18.*","status":"unaffected","version":"6.18.60","versionType":"semver"},{"lessThanOrEqual":"7.2.*","status":"unaffected","version":"7.2.14","versionType":"semver"},{"lessThanOrEqual":"7.3.*","status":"unaffected","version":"7.3.1","versionType":"semver"},{"lessThanOrEqual":"*","status":"unaffected","version":"7.4-rc1","versionType":"original_commit_for_fix"}]}],"cpeApplicability":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.1.191","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.6.161","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.12.115","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"6.18.60","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.2.14","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.3.1","versionStartIncluding":"5.19","vulnerable":true},{"criteria":"cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*","versionEndExcluding":"7.4-rc1","versionStartIncluding":"5.19","vulnerable":true}],"negate":false,"operator":"OR"}]}],"descriptions":[{"lang":"en","value":"In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Initialize modname and offset in print_rec()\n\nprint_rec() leaves 'modname' and 'offset' uninitialized and\nkallsyms_lookup() only sets them on success. When the lookup fails like\nwhen a module is being loaded or unloaded, 'modname' holds a garbage\nvalue, passes the 'if (modname)' check, and is dereferenced by\nseq_printf().\n\n  Oops: general protection fault\n  RIP: 0010:string+0x48/0xe0\n  Call Trace:\n   vsnprintf+0x1f5/0x650\n   seq_printf+0x8e/0xb0\n   print_rec+0x6c/0xc0\n   t_show+0x4c/0x440\n   seq_read_iter+0x119/0x480\n\nThis can be triggered by reading available_filter_functions while a\nmodule is being loaded or unloaded.\n\nInitialize both variables so a failed lookup skips the module name."}],"providerMetadata":{"dateUpdated":"2026-11-03T19:12:54.203Z","orgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","shortName":"Linux"},"references":[{"url":"https://git.kernel.org/stable/c/753d5cba113a52cb155428f4ea93a4b0148c4bf1"},{"url":"https://git.kernel.org/stable/c/0e5ff07be834abaf4280e1dca7f9591e339d0960"},{"url":"https://git.kernel.org/stable/c/e2e6fb972bfec4a0551bc7c185bdb17f78f94997"},{"url":"https://git.kernel.org/stable/c/8932e5a4df110a25578728526bb5a3dbc849d8a2"},{"url":"https://git.kernel.org/stable/c/7271c064dd60d4456c5b90da757acd9420d06697"},{"url":"https://git.kernel.org/stable/c/d97dba9ff13987d1fc415408557a54adde980311"},{"url":"https://git.kernel.org/stable/c/e1f339ff3b83857b93baf8b88186275a413d445e"}],"title":"ftrace: Initialize modname and offset in print_rec()","x_generator":{"engine":"bippy-1.2.0"}}},"cveMetadata":{"assignerOrgId":"416baaa9-dc9f-4396-8d5f-8c081fb06d67","assignerShortName":"Linux","cveId":"CVE-2026-99219","datePublished":"2026-11-02T16:06:31.529Z","dateReserved":"2026-09-25T10:25:14.401Z","dateUpdated":"2026-11-03T19:12:54.203Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.2"},"cna_checked":1794500401,"cve":"CVE-2026-99219","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nftrace: Initialize modname and offset in print_rec()\n\nprint_rec() leaves 'modname' and 'offset' uninitialized and\nkallsyms_lookup() only sets them on success. When the lookup fails like\nwhen a module is being loaded or unloaded, 'modname' holds a garbage\nvalue, passes the 'if (modname)' check, and is dereferenced by\nseq_printf().\n\n  Oops: general protection fault\n  RIP: 0010:string+0x48/0xe0\n  Call Trace:\n   vsnprintf+0x1f5/0x650\n   seq_printf+0x8e/0xb0\n   print_rec+0x6c/0xc0\n   t_show+0x4c/0x440\n   seq_read_iter+0x119/0x480\n\nThis can be triggered by reading available_filter_functions while a\nmodule is being loaded or unloaded.\n\nInitialize both variables so a failed lookup skips the module name.","epss":{"date":"2026-11-12","epss":0.00173,"percentile":0.0681},"epss_checked":1794522003,"first_seen":1794378631,"kev":null,"kev_checked":1794522003,"products":"Linux Linux","references":["https://git.kernel.org/stable/c/753d5cba113a52cb155428f4ea93a4b0148c4bf1","https://git.kernel.org/stable/c/0e5ff07be834abaf4280e1dca7f9591e339d0960","https://git.kernel.org/stable/c/e2e6fb972bfec4a0551bc7c185bdb17f78f94997","https://git.kernel.org/stable/c/8932e5a4df110a25578728526bb5a3dbc849d8a2","https://git.kernel.org/stable/c/7271c064dd60d4456c5b90da757acd9420d06697","https://git.kernel.org/stable/c/d97dba9ff13987d1fc415408557a54adde980311","https://git.kernel.org/stable/c/e1f339ff3b83857b93baf8b88186275a413d445e"],"score":null,"solutions":"","state":"PUBLISHED","title":"ftrace: Initialize modname and offset in print_rec()","updated_at":1794500401,"workarounds":""},"sources":[{"canonical_url":"https://www.bleepingcomputer.com/news/microsoft/microsoft-november-2026-patch-tuesday-fixes-1-235-flaws-outlook-zero-day/","id":375,"publisher":"BleepingComputer","title":"Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day"}]}