CVE-2026-97934

A flaw was found in the Linux kernel. An unbounded memory copy vulnerability exists in the tracing subsystem when processing event histogram keys like STACKTRACE due to improper field pointer handling. A local user with access to the kernel tracing interface can exploit this flaw by setting a specific histogram trigger, leading to memory corruption and a system crash, resulting in a Denial of Service (DoS).

This vulnerability is evaluated as a Moderate severity issue because manipulating event histogram keys requires administrative privileges or access to privileged tracing interfaces under default Red Hat Enterprise Linux settings. While exploitation can crash the operating system or corrupt kernel memory, unprivileged accounts cannot modify the relevant tracefs triggers. Furthermore, earlier enterprise releases, including Red Hat Enterprise Linux 8 and 9, do not contain the affected code.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.