CVE Database›Document archive›CVE-2026-99143

CVE-2026-99143

kernel: kernel: Denial of Service via out-of-bounds access in tracing predicate parsing

Loading…

Severity

Moderate

Red Hat Product Security

4.4

CVSS 3.1

Review impact separately from score.

Published · October 28, 2026

Updated · November 1, 2026

Description

A flaw was found in the Linux kernel's tracing subsystem. A local attacker could cause a Denial of Service (DoS) or memory corruption by exploiting an out-of-bounds memory access vulnerability during filter parsing. The predicate parsing mechanism improperly calculates boundary limits for event filter conditions, allowing parsing operations to exceed the allocated memory buffer. An attacker can exploit this issue by submitting a crafted filter expression to corrupt memory and crash the system.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 4.4
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

CWE-787 · Out-of-bounds Write