CVE-2026-64299

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: tracing: Prevent out-of-bounds read in glob matching String event fields are not necessarily NUL-terminated, so the filter predicate functions (filter_pred_string(), filter_pred_strloc() and filter_pred_strrelloc()) pass the field length to the regex match callbacks, and the length-aware matchers honour it. regex_match_glob() was the exception: it ignored the length and called glob_match(), which scans the string until it hits a NUL byte. Some string fields are not NUL-terminated. One example is the dynamic char array of th...

Affected product and versions

Product

Linux

Affected versions

>= 60f1d5e3bac44b598f67d36062da96c095d2b700 < 265f3a690f6c7d69ef7d2ca50b04b4853a211df3, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < ee5b8888d3248618251fb69a2fad92afcb81557e, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < 56d4c9ab84714eebb285a2fee68aaedf81e3ef15, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < 35ae19764eabfe9c29029d3b5713c86e6855acdf, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < ebb55902856973906c8bb339a3a34824ed4a5086, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < 2dad64a97e1df47f5d9ccb17fa319aa348617226, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < e5d5f3bd053a5f14787526c9f0f55ef900d43ac6, >= 60f1d5e3bac44b598f67d36062da96c095d2b700 < 0a6070839b1ef276d5b05bedfb787743e140fb17, >= 4.10

Fixed versions

No verified fixed-version field is available yet

Technical data

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

CWE

Not available