CVE-2026-72012

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to.

CVSS v3 7.8 HIGH

7.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 1.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://git.kernel.org/stable/c/38366140dc8ee3568c7f0191d517e117963bd580
https://git.kernel.org/stable/c/3c693635bb7b3a9b6645831a84fed2af46cdf249
https://git.kernel.org/stable/c/428cedade9b2cc8e48f00742df0cfd770e77a803
https://git.kernel.org/stable/c/dd0160a0842337f12e7694d68b184050afc6d3a4
https://git.kernel.org/stable/c/fad36954b29592ce463254179c3043697678481f
https://git.kernel.org/stable/c/fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a

Configurations

No configuration.

History

No history.

Information

Published : 2026-08-15 06:20

Updated : 2026-08-23 13:16

NVD link : CVE-2026-72012

Mitre link : CVE-2026-72012

CVE.ORG link : CVE-2026-72012

JSON object : View

Products Affected

No product.

CWE

No CWE.

{"id": "CVE-2026-72012", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "affected": [{"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67", "affectedData": [{"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "428cedade9b2cc8e48f00742df0cfd770e77a803", "versionType": "git"}, {"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "3c693635bb7b3a9b6645831a84fed2af46cdf249", "versionType": "git"}, {"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "38366140dc8ee3568c7f0191d517e117963bd580", "versionType": "git"}, {"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "fad36954b29592ce463254179c3043697678481f", "versionType": "git"}, {"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "dd0160a0842337f12e7694d68b184050afc6d3a4", "versionType": "git"}, {"status": "affected", "version": "a6ed2aee54644cfa2d04ca86308767f5c3a087e8", "lessThan": "fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a", "versionType": "git"}], "programFiles": ["kernel/trace/trace_osnoise.c"], "defaultStatus": "unaffected"}, {"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git", "vendor": "Linux", "product": "Linux", "versions": [{"status": "affected", "version": "5.17"}, {"status": "unaffected", "version": "0", "lessThan": "5.17", "versionType": "semver"}, {"status": "unaffected", "version": "6.1.184", "versionType": "semver", "lessThanOrEqual": "6.1.*"}, {"status": "unaffected", "version": "6.6.145", "versionType": "semver", "lessThanOrEqual": "6.6.*"}, {"status": "unaffected", "version": "6.12.97", "versionType": "semver", "lessThanOrEqual": "6.12.*"}, {"status": "unaffected", "version": "6.18.40", "versionType": "semver", "lessThanOrEqual": "6.18.*"}, {"status": "unaffected", "version": "7.1.5", "versionType": "semver", "lessThanOrEqual": "7.1.*"}, {"status": "unaffected", "version": "7.2", "versionType": "original_commit_for_fix", "lessThanOrEqual": "*"}], "programFiles": ["kernel/trace/trace_osnoise.c"], "defaultStatus": "affected"}]}], "published": "2026-08-15T06:20:59.907", "references": [{"url": "https://git.kernel.org/stable/c/38366140dc8ee3568c7f0191d517e117963bd580", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/3c693635bb7b3a9b6645831a84fed2af46cdf249", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/428cedade9b2cc8e48f00742df0cfd770e77a803", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/dd0160a0842337f12e7694d68b184050afc6d3a4", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fad36954b29592ce463254179c3043697678481f", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}, {"url": "https://git.kernel.org/stable/c/fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a", "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}], "vulnStatus": "Received", "descriptions": [{"lang": "en", "value": "In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/osnoise: Call synchronize_rcu() when unregistering\n\nThis ensures that any RCU readers traversing the instance list\nhave finished, before releasing the reference on the tracer that\nthe instance points to."}], "lastModified": "2026-08-23T13:16:37.100", "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"}