PT-2026-61345 · Linux · Linux

CVE-2026-64028

·

Publicado

2026-07-19

·

Atualizado

2026-07-19

Nenhuma

Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
In the Linux kernel, the following vulnerability has been resolved:
tracing: Avoid NULL return from hist field name() on truncation
hist field name() returns "" everywhere except the fully-qualified VAR REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL->"" guard. Callers don't expect NULL: strcat(expr, hist field name(field, 0)) at trace events hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it.
system and event name are bounded by MAX EVENT NAME LEN, but the field name on a VAR REF is kstrdup'd from a histogram variable name parsed out of the trigger string and has no length cap, so a long enough var name in a fully qualified reference can reach the truncation path.
Keep the length check but leave field name as "" on overflow.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2026-64028

Produtos afetados

Linux