{"id":"CVE-2026-99232","summary":"tracing/syscalls: Use copy_from_user for the faultable syscall buffer","details":"In the Linux kernel, the following vulnerability has been resolved:\n\ntracing/syscalls: Use copy_from_user for the faultable syscall buffer\n\nsyscall_copy_user_array() copies the buffer argument of faultable\nsyscalls (write, pwrite64, ...) with __copy_from_user(), which skips\naccess_ok(). Use copy_from_user() instead so a non-user address is\nrejected and the entry is recorded as faulted.\n\nIt could be a security concern for machines that trust perf a bit too\nmuch.","modified":"2026-11-10T17:27:01.548132211Z","published":"2026-11-02T16:06:39.212Z","related":["openSUSE-SU-2026:12497-1"],"database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99232.json","cna_assigner":"Linux"},"references":[{"type":"WEB","url":"https://git.kernel.org/stable/c/041d1a568a11a7ed7415ef1408d0c65041c1ad69"},{"type":"WEB","url":"https://git.kernel.org/stable/c/097fd0050089df17b032f2b852b9b65e548e342a"},{"type":"WEB","url":"https://git.kernel.org/stable/c/e33e2718c62a602001ab549642a1aed0be797105"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/99xxx/CVE-2026-99232.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-99232"},{"type":"PACKAGE","url":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","events":[{"introduced":"baa031b7bd2ce7502339174a42974321859ecd6a"},{"fixed":"e33e2718c62a602001ab549642a1aed0be797105"},{"fixed":"041d1a568a11a7ed7415ef1408d0c65041c1ad69"},{"fixed":"097fd0050089df17b032f2b852b9b65e548e342a"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99232.json"}},{"package":{"name":"Kernel","ecosystem":"Linux"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"6.19.0"},{"fixed":"7.2.14"}]},{"type":"ECOSYSTEM","events":[{"introduced":"7.3.0"},{"fixed":"7.3.1"}]}],"database_specific":{"source":"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-99232.json"}}],"schema_version":"1.9.2"}