Is there a patch available for CVE-2026-99219?

Yes, a patch is available for CVE-2026-99219. Update the affected software to the latest version immediately.

Linux CVE-2026-99219

EUVD-2026-115261

2026-11-02 Linux

GHSA-9w62-w855-8959

Information Disclosure Linux

View

Awaiting Data No severity or threat signals available yet. Label will update when CVSS score is published or threat intelligence arrives. Why: No CVSS yet + weak signal (CWE or non-zero EPSS).

Patch available 0.2% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisCVE.org

In the Linux kernel, the following vulnerability has been resolved:

ftrace: Initialize modname and offset in print_rec()

print_rec() leaves 'modname' and 'offset' uninitialized and kallsyms_lookup() only sets them on success. When the lookup fails like when a module is being loaded or unloaded, 'modname' holds a garbage value, passes the 'if (modname)' check, and is dereferenced by seq_printf().

Oops: general protection fault RIP: 0010:string+0x48/0xe0 Call Trace: vsnprintf+0x1f5/0x650 seq_printf+0x8e/0xb0 print_rec+0x6c/0xc0 t_show+0x4c/0x440 seq_read_iter+0x119/0x480

This can be triggered by reading available_filter_functions while a module is being loaded or unloaded.

Initialize both variables so a failed lookup skips the module name.

Affected VersionsENISA

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <7271c064dd60d4456c5b90da757acd9420d06697

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <0e5ff07be834abaf4280e1dca7f9591e339d0960

Linux patch: 6.12.115

Linux patch: 6.6.161

Linux 5.19

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <753d5cba113a52cb155428f4ea93a4b0148c4bf1

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <e2e6fb972bfec4a0551bc7c185bdb17f78f94997

Linux patch: 7.3.1

Linux patch: 0

Linux patch: 7.2.14

Linux patch: 6.18.60

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <d97dba9ff13987d1fc415408557a54adde980311

Linux patch: 6.1.191

Linux b39181f7c6907dc66ff937b74758671fa6ba430c <8932e5a4df110a25578728526bb5a3dbc849d8a2

Affected Packages

euvd linux no fix

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Know when the next one hits your stack

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Lifecycle Timeline

Patch available

Nov 02, 2026 - 17:18 EUVD

CVE Published

Nov 02, 2026 - 16:06 cve.org

UNKNOWN (no severity yet)

Threat Intelligence Overview

EPSS Score

0.2%

Top 93% exploitable

Data Quality

1 sources

Confidence: Low

EUVD

CVE.org

EPSS

VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity Not scored yet

CISA KEV No

Public POC No

EPSS 0.2%

Patch available Yes

Active threat No

Deciding rule

No CVSS yet + weak signal (CWE or non-zero EPSS)

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.