SB20261029165 - Heap-based buffer overflow in Linux kernel trace

Description

This security bulletin contains information about 1 vulnerability.

1) Heap-based buffer overflow (CVE-ID: CVE-2026-99143)

CWE-ID: CWE-122 - Heap-based Buffer Overflow

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local privileged user to potentially cause a denial of service through a kernel crash.

The vulnerability exists due to incorrect predicate-limit accounting in the Linux kernel tracing function predicate_parse() when parsing filter expressions containing more predicates than initially counted. A local privileged user can supply a crafted filter expression to exhaust the allocated program capacity and trigger out-of-bounds heap accesses, potentially causing a kernel crash.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/2058a1fe791bb30fd6e4875a7ada3237076c8541
• https://git.kernel.org/stable/c/68ecc9510bb82dd78585c02bd5357f34ee16b153
• https://git.kernel.org/stable/c/803aa6fc2dbea25ab9d3ed19eca1c96d0ab17445