CVE intelligence
CVE-2026-99142
Vulnerability intelligence
Published Oct 28, 2026Sources checked Oct 28, 2026
N/ACVSS not listedScore unavailable
What this means
Review the available evidence
CVE-2026-99142. It is not in the current CISA KEV record we collected. That does not prove exploitation has not occurred.
What to do nextRemediation and response
CISA KEVNot listedBased on the latest collected catalog
EPSSUnavailableNo current score collected
Ransomware useNot markedCISA KEV ransomware field
Threat actors0Source-linked actor relationships
Overview
What is CVE-2026-99142?
In the Linux kernel, the following vulnerability has been resolved:
tracing: Check operator stack capacity before pushing
predicate_parse() uses the first operator stack entry before processing any opening parentheses. A push then increments top before writing.
The existing check still permits that write when top already points to the last allocated entry, which can access beyond the operator stack.
Reject the push when top reaches the last allocated entry.
Source: NVD