Log in Start free

Vulnerability · Published Oct 28, 2026 · Assigned by Linux

CVE-2026-99143tracing: Keep the predicate limit separate from program capacity

High 7.8

In plain English

A high-severity security flaw in Linux from Linux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 3% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.1%top 97.4% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known

Official description

In the Linux kernel, the following vulnerability has been resolved: tracing: Keep the predicate limit separate from program capacity predicate_parse() adds two to nr_preds to reserve the terminal TRUE and FALSE entries. It also uses that increased value as the limit for parsed predicates. If the initial count is smaller than the number actually parsed, the program can fill the allocation and subsequent accesses can go past its end. Keep nr_preds as the predicate limit and use a separate value for the allocation size. This leaves space for both terminal entries and a zeroed entry when parsing stops at the limit.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
Debian:13linux6.12.115-2DEBIAN-CVE-2026-99143
Debian:14linux7.2.13-1DEBIAN-CVE-2026-99143
Ubuntu:24.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinuxno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux7.3.0-10.10UBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-allwinner-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-awsno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-aws7.3.0-1004.4UBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-aws-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-aws-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-aws-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-aws-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-aws-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-aws-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-aws-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-azureno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-azureno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-azure-fdeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-azure-fdeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-fde-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-fde-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-fde-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-fde-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-azure-fde-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-fde-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-nvidiano fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-azure-nvidia-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-gcpno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-gcp7.3.0-1004.4UBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-gcp-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gcp-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gcp-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gcp-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-gcp-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-gcp-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-gcp-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gcp-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-gkeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-gkeopno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-hwe-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-hwe-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-hwe-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-hwe-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-hwe-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-hwe-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-hwe-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-hwe-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-ibmno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-ibm-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-intel-iot-realtimeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-lowlatencyno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-lowlatency-hwe-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-lowlatency-hwe-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-lowlatency-hwe-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-nvidiano fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidia-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidia-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-nvidia-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-nvidia-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-nvidia-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidia-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-nvidia-bosno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidia-lowlatencyno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-nvidia-tegrano fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oem-5.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oem-6.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oem-6.1no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oem-6.11no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oem-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oem-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oem-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oem-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-oem-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-oracleno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-oracle7.3.0-1004.4UBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oracle-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oracle-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oracle-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-oracle-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-oracle-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-raspino fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-raspi7.3.0-1004.4UBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-raspi-realtimeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-realtimeno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-realtime7.3.0-10.10.1UBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.04:LTSlinux-riscvno fix listedUBUNTU-CVE-2026-99143
Ubuntu:26.10linux-riscv7.3.0-10.10.1UBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-riscv-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-riscv-6.14no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-riscv-6.17no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-riscv-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-riscv-6.8no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-riscv-7.0no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-starfive-5.19no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-starfive-6.2no fix listedUBUNTU-CVE-2026-99143
Ubuntu:22.04:LTSlinux-starfive-6.5no fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-vmwareno fix listedUBUNTU-CVE-2026-99143
Ubuntu:24.04:LTSlinux-xilinxno fix listedUBUNTU-CVE-2026-99143

Affected products (as reported)

VendorProductVersions
Linux Linux 39f7c41c908bc82947ce47cdd021520ff486c53f – before f4fcbae8b27350565026807e77c96541d9e7a34939f7c41c908bc82947ce47cdd021520ff486c53f – before 37049f8c56d377e46a8ef1ff93178a39a68a9c9c39f7c41c908bc82947ce47cdd021520ff486c53f – before 2058a1fe791bb30fd6e4875a7ada3237076c854139f7c41c908bc82947ce47cdd021520ff486c53f – before 68ecc9510bb82dd78585c02bd5357f34ee16b15339f7c41c908bc82947ce47cdd021520ff486c53f – before 803aa6fc2dbea25ab9d3ed19eca1c96d0ab17445
Linux Linux 6.6

References