CVE-2026-99232

Published 2 November 2026 · tracked since 3 November 2026

Description

In the Linux kernel, the following vulnerability has been resolved: tracing/syscalls: Use copy_from_user for the faultable syscall buffer syscall_copy_user_array() copies the buffer argument of faultable syscalls (write, pwrite64, ...) with __copy_from_user(), which skips access_ok(). Use copy_fro

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-119736 HIGH 8.2
• CVE-2026-120057 HIGH 7.5
• CVE-2026-120058 HIGH 7.5
• CVE-2026-105603
• CVE-2026-105604
• CVE-2026-119301 HIGH 7.9
• CVE-2026-105769 CRITICAL 9.3
• CVE-2026-99242
• CVE-2026-99236 HIGH 7.8
• CVE-2026-99237 HIGH 7.8

→ Open the live CVE board · all tools