CVE-2026-98937

The Linux kernel contains a vulnerability where the perf_event_open() system call fails to properly enforce permission checks. Specifically, it only gates perf_allow_kernel() when attr.exclude_kernel is false. This allows users to request kernel callchain collection (where attr.exclude_callchain_...