{"id":"CVE-2026-99232","published":"2026-11-02T16:17:48.247","lastModified":"2026-11-02T16:17:48.247","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/syscalls: Use copy_from_user for the faultable syscall buffer\n\nsyscall_copy_user_array() copies the buffer argument of faultable\nsyscalls (write, pwrite64, ...) with __copy_from_user(), which skips\naccess_ok(). Use copy_from_user() instead so a non-user address is\nrejected and the entry is recorded as faulted.\n\nIt could be a security concern for machines that trust perf a bit too\nmuch.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://git.kernel.org/stable/c/041d1a568a11a7ed7415ef1408d0c65041c1ad69","tags":[]},{"url":"https://git.kernel.org/stable/c/e33e2718c62a602001ab549642a1aed0be797105","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}