<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 30 Sep 2026 10:03:02 +0000</lastBuildDate>
    <item>
      <title>CVE-2026-23088 — tracing: Fix crash on synthetic stacktrace field usage</title>
      <link>https://vulnerability.circl.lu/vuln/cve-2026-23088</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;tracing: Fix crash on synthetic stacktrace field usage&lt;/p&gt;
&lt;p&gt;When creating a synthetic event based on an existing synthetic event that
had a stacktrace field and the new synthetic event used that field a
kernel crash occurred:&lt;/p&gt;
&lt;p&gt;~# cd /sys/kernel/tracing
 ~# echo &amp;#39;s:stack unsigned long stack[];&amp;#39; &amp;gt; dynamic_events
 ~# echo &amp;#39;hist:keys=prev_pid:s0=common_stacktrace if prev_state &amp;amp; 3&amp;#39; &amp;gt;&amp;gt; events/sched/sched_switch/trigger
 ~# echo &amp;#39;hist:keys=next_pid:s1=$s0:onmatch(sched.sched_switch).trace(stack,$s1)&amp;#39; &amp;gt;&amp;gt; events/sched/sched_switch/trigger&lt;/p&gt;
&lt;p&gt;The above creates a synthetic event that takes a stacktrace when a task
schedules out in a non-running state and passes that stacktrace to the
sched_switch event when that task schedules back in. It triggers the
&amp;#34;stack&amp;#34; synthetic event that has a stacktrace as its field (called &amp;#34;stack&amp;#34;).&lt;/p&gt;
&lt;p&gt;~# echo &amp;#39;s:syscall_stack s64 id; unsigned long stack[];&amp;#39; &amp;gt;&amp;gt; dynamic_events
 ~# echo &amp;#39;hist:keys=common_pid:s2=stack&amp;#39; &amp;gt;&amp;gt; events/synthetic/stack/trigger
 ~# echo &amp;#39;hist:keys=common_pid:s3=$s2,i0=id:onmatch(synthetic.stack).trace(syscall_stack,$i0,$s3)&amp;#39; &amp;gt;&amp;gt; events/raw_syscalls/sys_exit/trigger&lt;/p&gt;
&lt;p&gt;The above makes another synthetic event called &amp;#34;syscall_stack&amp;#34; that
attaches the first synthetic event (stack) to the sys_exit trace event and
records the stacktrace from the stack event with the id of the system call
that is exiting.&lt;/p&gt;
&lt;p&gt;When enabling this event (or using it in a historgram):&lt;/p&gt;
&lt;p&gt;~# echo 1 &amp;gt; events/s…&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Linux&lt;/p&gt;
&lt;p&gt;In the Linux kernel, the following vulnerability has been resolved:&lt;/p&gt;
&lt;p&gt;tracing: Fix crash on synthetic stacktrace field usage&lt;/p&gt;
&lt;p&gt;When creating a synthetic event based on an existing synthetic event that
had a stacktrace field and the new synthetic event used that field a
kernel crash occurred:&lt;/p&gt;
&lt;p&gt;~# cd /sys/kernel/tracing
 ~# echo &amp;#39;s:stack unsigned long stack[];&amp;#39; &amp;gt; dynamic_events
 ~# echo &amp;#39;hist:keys=prev_pid:s0=common_stacktrace if prev_state &amp;amp; 3&amp;#39; &amp;gt;&amp;gt; events/sched/sched_switch/trigger
 ~# echo &amp;#39;hist:keys=next_pid:s1=$s0:onmatch(sched.sched_switch).trace(stack,$s1)&amp;#39; &amp;gt;&amp;gt; events/sched/sched_switch/trigger&lt;/p&gt;
&lt;p&gt;The above creates a synthetic event that takes a stacktrace when a task
schedules out in a non-running state and passes that stacktrace to the
sched_switch event when that task schedules back in. It triggers the
&amp;#34;stack&amp;#34; synthetic event that has a stacktrace as its field (called &amp;#34;stack&amp;#34;).&lt;/p&gt;
&lt;p&gt;~# echo &amp;#39;s:syscall_stack s64 id; unsigned long stack[];&amp;#39; &amp;gt;&amp;gt; dynamic_events
 ~# echo &amp;#39;hist:keys=common_pid:s2=stack&amp;#39; &amp;gt;&amp;gt; events/synthetic/stack/trigger
 ~# echo &amp;#39;hist:keys=common_pid:s3=$s2,i0=id:onmatch(synthetic.stack).trace(syscall_stack,$i0,$s3)&amp;#39; &amp;gt;&amp;gt; events/raw_syscalls/sys_exit/trigger&lt;/p&gt;
&lt;p&gt;The above makes another synthetic event called &amp;#34;syscall_stack&amp;#34; that
attaches the first synthetic event (stack) to the sys_exit trace event and
records the stacktrace from the stack event with the id of the system call
that is exiting.&lt;/p&gt;
&lt;p&gt;When enabling this event (or using it in a historgram):&lt;/p&gt;
&lt;p&gt;~# echo 1 &amp;gt; events/s…&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/cve-2026-23088</guid>
    </item>
  </channel>
</rss>
