CVE-2026-64299

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An out-of-bounds read occurs during glob matching in the tracing system. This happens because regex match glob() calls glob match(), which scans strings until a NUL byte is encountered, ignoring the actual field length. Since some string event fields, such as the dynamic char array of the xfs * namespace tracepoints, are not NUL-terminated, the process reads past the end of the event field. This issue is triggered via filter match preds() from the xfs lookup tracepoint, leading to a KASAN slab-out-of-bounds read in glob match(). The vulnerability involves the following functions: filter pred string(), filter pred strloc(), filter pred strrelloc(), regex match glob(), and glob match().

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.