CVE-2026-99160: ring-buffer: Do not show buffer_meta for CPUs without a buffer
Published Oct 28, 2026
·Updated
In the Linux kernel, the following vulnerability has been resolved:
ring-buffer: Do not show buffermeta for CPUs without a buffer
The percpu/cpuN/buffermeta files are created for every possible CPU, but buffer->buffers[cpu] is only allocated once that CPU comes online. Reading the file of a CPU that never came online dereferences a NULL cpubuffer in rbmstart().
Fail the open with -ENODEV when the CPU has no buffer, as the other per CPU ring buffer interfaces do.
Affected Software
1 affected component
Linux Linux kernel
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Make access to per_cpu/cpuN/buffer_meta fail with -ENODEV when the CPU has no allocated buffer, and do not show buffer_meta for CPUs without a buffer.
Event History
Oct 28, 2026
CVE Published
via MITRE·10:35 AM
Data Sourced
via MITRE·10:35 AM
Description
Data Sourced
via NVD·11:17 AM
Description