CVE-2026-99143
kernel: kernel: Denial of Service via out-of-bounds access in tracing predicate parsing
Severity
ModerateRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · October 28, 2026
Updated · November 1, 2026
Description
A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service (DoS) or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event filter conditions, allowing parsing operations to exceed the allocated memory buffer. An attacker can exploit this issue by submitting a crafted filter expression to corrupt memory and crash the system.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 4.4CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CWE-787 · Out-of-bounds Write