The Linux kernel tracing subsystem had a vulnerability (CVE-2026-64299) where string event fields that are not NUL-terminated could cause out-of-bounds reads during glob pattern matching. While most filter predicate functions respected the string length, regex_match_glob() called glob_match(), which scanned until a NUL byte, ignoring the length. This led to a kernel address sanitizer (KASAN) slab-out-of-bounds read, notably triggered via the xfs_lookup tracepoint's dynamic char array fields. The fix involved adding a length-bounded glob_match_len() function used by regex_match_glob() to ensure matching respects field boundaries, preventing out-of-bounds access.

The vulnerability causes out-of-bounds reads in kernel memory during tracing operations, which can lead to kernel memory corruption detection alerts (KASAN) and potentially destabilize the kernel. There is no indication of code execution or privilege escalation from the provided data. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel to address this issue by adding length-bounded glob matching. Users should apply the official kernel updates that include this patch. Since this is not a cloud service, remediation requires updating the affected Linux kernel versions once the patch is released. Patch status is not explicitly confirmed in the provided data; check the vendor advisory for current remediation guidance.