CVE-2026-98937

The Linux kernel contains a vulnerability where the perf_event_open() system call fails to properly enforce permission checks. Specifically, it only gates perf_allow_kernel() when attr.exclude_kernel is false. This allows users to request kernel callchain collection (where attr.exclude_callchain_...

CVE-2026-98937

In the Linux kernel, the following vulnerability has been resolved: perf/core: Check kernel access when kernel callchains are requested perfeventopen currently gates perfallowkernel only on !attr.excludekernel. However, users can still request kernel callchain collection with...