A memory corruption vulnerability exists in the Linux kernel tracing subsystem. By crafting a histogram key named "STACKTRACE" and writing a trigger event to the tracing interface, an attacker can cause the kernel to execute an unbounded memcpy that reads from an arbitrary address, leading to a general protection fault and a kernel panic. This results in a denial of service, halting the affected system. The issue arises from improper bounds checking when mapping generic field names to their internal representations, allowing a zero‑size placeholder to be used as a length for a memcpy operation.

All Linux kernel releases prior to the patch referenced in the included git commits are affected. The vulnerability manifests through the /sys/kernel/tracing interface and requires the ability to write to the 'trace_marker' file or the 'events/ftrace/print/trigger' file, typically necessitating root or elevated privileges.

The CVSS score is not available in the provided data, but the severity is high as the flaw can crash the kernel. The EPSS score is not reported, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local access and the ability to write to the tracing debug filesystem, making the attack vector a local privilege escalation or a compromised privileged process. Once exploited, the kernel will panic, causing an immediate denial of service for all users on the machine.