CVE-2026-74391

A flaw was found in the tracing subsystem of the Linux kernel. This vulnerability occurs because synthetic field helpers use unbounded string concatenation strcat when building synthetic variable names and generated history commands. An attacker providing excessively long input for key lists, fie...

CVE-2026-74391 tracing: Bound synthetic-field strings with seq_buf

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

CVE-2026-74391 tracing: Bound synthetic-field strings with seq_buf

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

CVE-2026-74391

In the Linux kernel, the following vulnerability has been resolved: tracing: Bound synthetic-field strings with seqbuf The synthetic field helpers build a prefixed synthetic variable name and a generated hist command in fixed MAXFILTERSTRVAL buffers. The current code appends those strings with ra...

PT-2026-72827

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description Synthetic field helpers in the tracing component build a prefixed synthetic variable name and a generated hist command using fixed MAX FILTER STR VAL buffers. The use of the strcat...