CVE-2026-99232: Linux

Описание

Оригинално описание

In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultable syscall buffer syscall_copy_user_array() copies the buffer argument of faultable syscalls (write, pwrite64, ...) with __copy_from_user(), which skips access_ok(). Use copy_from_user() instead so a non-user address is rejected and the entry is recorded as faulted. It could be a security concern for machines that trust perf a bit too much.

Засегнати продукти

• Linux Linux: baa031b7bd2ce7502339174a42974321859ecd6a преди e33e2718c62a602001ab549642a1aed0be797105; baa031b7bd2ce7502339174a42974321859ecd6a преди 041d1a568a11a7ed7415ef1408d0c65041c1ad69; baa031b7bd2ce7502339174a42974321859ecd6a преди 097fd0050089df17b032f2b852b9b65e548e342a
• Linux Linux: 6.19; преди 6.19; 7.2.14 до 7.2.*; 7.3.1 до 7.3.*; от 7.4-rc1 нататък

История

Други уязвимости в Linux Linux

• 8.1CVE-2026-99270
• 7.8CVE-2026-99269
• CVE-2026-99268
• CVE-2026-99266
• CVE-2026-99267

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2026-99232
• https://nvd.nist.gov/vuln/detail/CVE-2026-99232
• https://git.kernel.org/stable/c/e33e2718c62a602001ab549642a1aed0be797105
• https://git.kernel.org/stable/c/041d1a568a11a7ed7415ef1408d0c65041c1ad69
• https://git.kernel.org/stable/c/097fd0050089df17b032f2b852b9b65e548e342a