Linux Kernel Syscall Buffer Vulnerability in Performance Tracing

CVE-2026-99232

What is CVE-2026-99232?

A vulnerability in the Linux kernel's performance tracing subsystem allows improper handling of syscall buffer arguments due to the use of the syscall_copy_user_array() function, which utilizes __copy_from_user() without proper address validation. This bypass can lead to the acceptance of non-user addresses, posing potential security risks as the faults go unrecorded. Switching to the use of copy_from_user() ensures appropriate checks are conducted, enhancing security by rejecting invalid addresses.

References