CVE-2026-43210

tracing: ring-buffer: Fix to check event length before using

published May 6, 2026

CVSS
—
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

tracing: ring-buffer: Fix to check event length before using

Check the event length before adding it for accessing next index in

rb_read_data_buffer(). Since this function is used for validating

possibly broken ring buffers, the length of the event could be broken.

In that case, the new event (e + len) can point a wrong address.

To avoid invalid memory access at boot, check whether the length of

each event is in the possible range before using it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Published
2026-05-06T11:28Z
EPSS history
Timeline
  • 06 MAY 11:28Z
    tracing: ring-buffer: Fix to check event length before using
    cvelistv5