https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 14:53:58 +0000 https://db.gcve.eu/vuln/cve-2026-99219 <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ftrace: Initialize modname and offset in print_rec()</p> <p>print_rec() leaves &#39;modname&#39; and &#39;offset&#39; uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, &#39;modname&#39; holds a garbage value, passes the &#39;if (modname)&#39; check, and is dereferenced by seq_printf().</p> <p>Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480</p> <p>This can be triggered by reading available_filter_functions while a module is being loaded or unloaded.</p> <p>Initialize both variables so a failed lookup skips the module name.</p> <p><strong>Affected:</strong> Linux</p> <p>In the Linux kernel, the following vulnerability has been resolved:</p> <p>ftrace: Initialize modname and offset in print_rec()</p> <p>print_rec() leaves &#39;modname&#39; and &#39;offset&#39; uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, &#39;modname&#39; holds a garbage value, passes the &#39;if (modname)&#39; check, and is dereferenced by seq_printf().</p> <p>Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480</p> <p>This can be triggered by reading available_filter_functions while a module is being loaded or unloaded.</p> <p>Initialize both variables so a failed lookup skips the module name.</p> https://db.gcve.eu/vuln/cve-2026-99219