CVE-2026-98951

A flaw was found in the Linux kernel's RISC-V architecture. When handling process tracing (ptrace) register set requests with shorter-than-expected data lengths, the kernel fails to initialize temporary stack buffers before copying user input. A local attacker with process tracing privileges can exploit this issue to leak sensitive kernel stack data into the target process or corrupt its execution state.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.