Heap-based buffer overflow in Linux kernel - CVE-2026-99143

Vulnerability details

The vulnerability allows a local privileged user to potentially cause a denial of service through a kernel crash.

The vulnerability exists due to incorrect predicate-limit accounting in the Linux kernel tracing function predicate_parse() when parsing filter expressions containing more predicates than initially counted. A local privileged user can supply a crafted filter expression to exhaust the allocated program capacity and trigger out-of-bounds heap accesses, potentially causing a kernel crash.

Affected software

How to mitigate CVE-2026-99143

External References

• https://git.kernel.org/stable/c/2058a1fe791bb30fd6e4875a7ada3237076c8541
• https://git.kernel.org/stable/c/68ecc9510bb82dd78585c02bd5357f34ee16b153
• https://git.kernel.org/stable/c/803aa6fc2dbea25ab9d3ed19eca1c96d0ab17445

Related Security Bulletins

• Heap-based buffer overflow in Linux kernel trace
• Debian update for linux