Unscored severity · published Oct 28, 2026
CVE-2026-99160
ring-buffer: Do not show buffer_meta for CPUs without a buffer
New
–
CVSS
–
EPSS
No
On KEV
Description
In the Linux kernel, the following vulnerability has been resolved: ring-buffer: Do not show buffer_meta for CPUs without a buffer The per_cpu/cpuN/buffer_meta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpu_buffer in rbm_start(). Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Linux · Linux
950032ffcee7a43c960951940059afc5a2bdbcbc before 8512d0312cc0ea83ca4511b164c29a138bbb0c21; 950032ffcee7a43c960951940059afc5a2bdbcbc before ae670c1a24fb5ffb167f26358cf47a5f0abbd670; 950032ffcee7a43c960951940059afc5a2bdbcbc before 3f23cae09a4677a3f7c163a68388512cb231ff22; 6.12 · source: vendor
Affected product
LI
Linux
Linux
More from Linux
9.8
CVE-2025-39682
tls: fix handling of zero-length records on the rx_list
8.8
CVE-2026-53266
netfilter: bridge: make ebt_snat ARP rewrite writable
7.8
CVE-2026-53362
ipv6: account for fraggap on the paged allocation path
7.8
CVE-2026-31431
crypto: algif_aead - Revert to operating out-of-place
7.8
CVE-2025-38352
posix-cpu-timers: fix race between handle_posix_cpu_timers() and posix_cpu_timer_del()