SB20261029142 - Incorrect Check of Function Return Value in Linux kernel trace

Description

This security bulletin contains information about 1 vulnerability.

1) Incorrect Check of Function Return Value (CVE-ID: CVE-2026-99158)

CWE-ID: CWE-253 - Incorrect Check of Function Return Value

CVSSv4: 0 [CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N]

The vulnerability allows a local user to trigger a spurious kernel warning.

The vulnerability exists due to incorrect handling of a valid NULL return value in ring_buffer_map_get_reader() when a memory-mapped tracing ring-buffer reader catches up with a writer that is still committing events. A local user can read from the ring buffer during concurrent event commits to trigger a spurious kernel warning because the function incorrectly treats a no-data result from rb_get_reader_page() as an error.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/029770f5badedc0f0ff85fc45e24785cbbee4a67
• https://git.kernel.org/stable/c/68e6ab180cfb6dfa79652f41ed7899a6d4cf5438
• https://git.kernel.org/stable/c/89bab1dba8a0167ef0d819e0f55b6bafa038e87f