CVE-2026-99142

Last refreshed2026-10-31

Status: UPDATED | Advisory ID: CVE-2026-99142

Key Details

CVE	CVE-2026-99142
CVSS Score / Version	7.1 (High) / CVSS v3.1
Updated	2026-10-31
CVSS Vector	`CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H`
CVSS Prose	attack vector is local; attack complexity is low; privileges required is low; user interaction is none; scope is unchanged; confidentiality impact is none; integrity impact is high; availability impact is high.
Affected products	Linux Kernel

Vendor	Product	Affected Versions	Patch Status
Linux	Linux Kernel

Vendor

Product

Affected Versions

Patch Status

Linux

Linux Kernel

Subsystems	OT Supporting Infrastructure
Sectors	All Sectors

In the Linux kernel, the following vulnerability has been resolved:

tracing: Check operator stack capacity before pushing

predicate_parse() uses the first operator stack entry before processing

any opening parentheses. A push then increments top before writing.

The existing check still permits that write when top already points to

the last allocated entry, which can access beyond the operator stack.

Reject the push when top reaches the last allocated entry. (NVD)

Monitor Linux's web page for any future patch releases.

Source	Reference
NVD	https://nvd.nist.gov/vuln/detail/CVE-2026-99142
CVE	https://www.cve.org/CVERecord?id=CVE-2026-99142

Source

Reference

NVD

CVE