CVE-2026-64028
kernel: tracing: Avoid NULL return from hist_field_name() on truncation
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · July 19, 2026
Updated · October 14, 2026
Description
A flaw was found in the Linux kernel's tracing subsystem. The hist_field_name() function, responsible for handling field names, can return a NULL value if a long variable name in a fully-qualified reference causes snprintf() truncation. This unexpected NULL return can lead to a NULL pointer dereference when other functions attempt to use the returned value, potentially causing a system crash and resulting in a Denial of Service (DoS).
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 5.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CWE-476 · NULL Pointer Dereference