Skip to content
Sign in
7.8 High

CVE-2026-23271 In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs…

Description

In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure that __perf_event_overflow() runs with IRQs disabled for all possible callchains. Specifically the software events can end up running it with only preemption disabled. This opens up a race vs perf_event_exit_event() and friends that will go and free various things the overflow path expects to be present, like the BPF program.

Affected products and versions

Product Affected versions Fixed in
Linux 7.0 earliest → < 7.0 7.0
Linux 6.19 earliest → < 6.19.7 6.19.7
Linux 6.18 earliest → < 6.18.17 6.18.17
Linux 6.12 earliest → < 6.12.77 6.12.77
Linux 6.6 earliest → < 6.6.130 6.6.130
Linux 6.1 earliest → < 6.1.167 6.1.167
Linux 2.6.31 No fix stated
SIMATIC S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
SIMATIC S7-1500 CPU 1518F-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
Show the 2 other branches
Product Affected versions Fixed in
SIPLUS S7-1500 CPU 1518-4 PN/DP MFP 3.1 3.1.7 → latest No fix stated
SIMATIC S7-1500 TM MFP - GNU/Linux subsystem Versions not published

Other CVEs of Linux

The 18300 CVEs of Linux →
CVE-2026-99284 net: skbuff: propagate shared-frag marker in skb_zerocopy() Not rated CVE-2026-99283 netfilter: conntrack: tcp: use UNACK timeout for non-closing RST packets Not rated CVE-2026-99282 net/sched: sch_teql: fix use-after-free on lower qdisc drop Not rated CVE-2026-99281 tun: Require CAP_NET_ADMIN to attach to an ownerless device Not rated
Track this CVE