What’s Vulnerable › Vulnerabilities

CVE-2026-72012: tracing/osnoise: Call synchronize_rcu() when unregistering

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-08-15 · updated 2026-10-19
• Weakness: CWE-667

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/osnoise: Call synchronize_rcu() when unregistering This ensures that any RCU readers traversing the instance list have finished, before releasing the reference on the tracer that the instance points to.

Affected products

• Linux kernel: 5.17 — fixed in 7.2

How to fix

Upgrade to a fixed version: Linux kernel 7.2. Check the vendor advisory for mitigations.

References

• https://git.kernel.org/stable/c/38366140dc8ee3568c7f0191d517e117963bd580
• https://git.kernel.org/stable/c/3c693635bb7b3a9b6645831a84fed2af46cdf249
• https://git.kernel.org/stable/c/428cedade9b2cc8e48f00742df0cfd770e77a803
• https://git.kernel.org/stable/c/dd0160a0842337f12e7694d68b184050afc6d3a4
• https://git.kernel.org/stable/c/fad36954b29592ce463254179c3043697678481f
• https://git.kernel.org/stable/c/fe58f457ad8d0a2bef4e053cfecca4b5cd266b1a

Get alerted when CVE-2026-72012 or the next vulnerability affects your stack