CVE-2026-99236

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds memory access exists in the tracing filter parser. A local user with perf access can read and corrupt kernel memory by providing a crafted tracepoint filter expression. The issue occurs in the predicate parse() function when a non-empty expression ends with an unresolved logical operator or unary '!' tokens. This causes the outer loop to fall through with an unresolved operator state, potentially leading to the reading of prog[-1] or copying an out-of-bounds word into a branch target. This path can be reached via the PERF EVENT IOC SET FILTER operation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.