CVE-2026-99232

Name of the Vulnerable Software and Affected Versions Linux Kernel (affected versions not specified)

Description An issue exists in the tracing/syscalls component where the syscall copy user array() function uses copy from user() to copy buffer arguments of faultable syscalls, such as write and pwrite64. Because copy from user() skips the access ok() check, it fails to reject non-user addresses, which may lead to security concerns on systems that overly trust the perf tool.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.