Linux Kernel Vulnerability Affecting Event Filter Expressions

CVE-2026-99236

What is CVE-2026-99236?

The vulnerability in the Linux kernel relates to improper handling of event filter expressions. When processing event filters, the kernel's parsing logic does not adequately reject incomplete or malformed conditions, such as those ending with logical operators. This flaw can lead to a state where an unresolved operator allows access to potentially unsafe memory locations. Consequently, this could be exploited when certain tracepoint events are triggered, particularly affecting how filters are applied. The fix ensures that any incomplete expressions are flagged appropriately, preventing execution paths that could compromise system integrity.

References