CVE Explorer

CVE-2026-64028

In the Linux kernel, the following vulnerability has been resolved: tracing: Avoid NULL return from hist_field_name() on truncation hist_field_name() returns "" everywhere except the fully-qualified VAR_REF/EXPR case, where snprintf() truncation returns NULL early and bypasses the bottom NULL->"" guard. Callers don't expect NULL: strcat(expr, hist_field_name(field, 0)) at trace_events_hist.c:1758 and the strcmp() in the sort-key match loop at :4804 both deref it. system and event_name are bou

Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:d3fe8603ac4d0ed4b9e2524ca513eba7ea317bb7389e9d3cf91a0e4eae72403f

Known exploited

Not asserted

Disputed

Stale source

Conflicts

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/trace_events_hist.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"6.6.142","status":"affected","version":"6.6.141","versionType":"semver"},{"lessThan":"6.12.92","status":"affected","version":"6.12.91","versionType":"semver"},{"lessThan":"6.18.34","status":"affected","version":"6.18.33","versionType":"semver"},{"lessThan":"7.0.11","status":"affected","version":"7.0.10","versionType":"semver"}]}

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/trace_events_hist.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e3f5d42cdc2f167719564693675f1eead81378ea","status":"affected","version":"2e8578364061c4e88ae33bc20c2d6f64f365f6a2","versionType":"git"},{"lessThan":"37377b39ff86dacbc533275c1155210d4fd5dc91","status":"affected","version":"dfd1cd57ee6067301841b7b0967c70f910a51150","versionType":"git"},{"lessThan":"0402a1d3ddec565132867337ed44514a09d84728","status":"affected","version":"e5c223f46c2e0…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/affected/0

Affected products and versions

2 source assertions

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/trace/trace_events_hist.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"e3f5d42cdc2f167719564693675f1eead81378ea","status":"affected","version":"2e8578364061c4e88ae33bc20c2d6f64f365f6a2","versionType":"git"},{"lessThan":"37377b39ff86dacbc533275c1155210d4fd5dc91","status":"affected","version":"dfd1cd57ee6067301841b7b0967c70f910a51150","versionType":"git"},{"lessThan":"0402a1d3ddec565132867337ed44514a09d84728","status":"affected","version":"e5c223f46c2e0…

cve_program_cvelist_v5affected
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/affected/0

Source references

8 source assertions

{"url":"https://git.kernel.org/stable/c/0402a1d3ddec565132867337ed44514a09d84728"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/2

{"url":"https://git.kernel.org/stable/c/37377b39ff86dacbc533275c1155210d4fd5dc91"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/1

{"url":"https://git.kernel.org/stable/c/576ec047d20b368b43c4d5db98c4f2e0f3c101ec"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/7

{"url":"https://git.kernel.org/stable/c/915c1254fe0788abddc31095b360e9dc98907a34"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/6

{"url":"https://git.kernel.org/stable/c/be4e99038c1603fa6b329d8ee3e364825e17c353"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/4

{"url":"https://git.kernel.org/stable/c/d6c8b3ebdcdb12b59ad4212acb137cc56cae453d"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/5

{"url":"https://git.kernel.org/stable/c/e3f5d42cdc2f167719564693675f1eead81378ea"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/0

{"url":"https://git.kernel.org/stable/c/e91687643c440ca3997d67646e6f80b92edc6703"}

cve_program_cvelist_v5reference
urn:baitaphish:normalized-source-record:v2:5dae64d8ae595e68c538c51b970fca8d3274348ab15e4d7904be79b06f14bd3c · sha256:79ca85a85df180cf… · /containers/cna/references/3

Attribution and limitations

CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer