EUVD-2026-67547

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

EUVD-2026-67546

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80671

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

CVE-2026-80671

CVE-2026-80671 affects the Linux kernel 's perf sched subsystem, specifically the register_pid() function. When processing untrusted perf.data input, four issues exist: an integer overflow in the allocation size calculation on 32-bit systems, a heap buffer overflow via unbounded strcpy into a fix...

CVE-2026-80670

In the Linux kernel, the following vulnerability has been resolved: perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but without validating al-cpu against env-nrcpusavail. Since al-cpu comes from...

CVE-2026-80670

CVE-2026-80670 affects the Linux kernel perf tools subsystem. The function machine__resolve() accesses env->cpu[al->cpu].socket_id after validating al->cpu >= 0 and env->cpu != NULL, but fails to validate al->cpu against env->nr_cpus_avail. Because al->cpu originates from ...

CVE-2026-80671 perf sched: Fix register_pid() overflow, strcpy, and BUG_ON

In the Linux kernel, the following vulnerability has been resolved: perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1 sizeofstruct taskdesc can wrap to a small value on 32-bit systems when pid i...

EUVD-2026-67502

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matching getcpuvar after the 'i hw.idx is negative the function jumps to...

CVE-2026-80626

CVE-2026-80626 is a preempt count underflow in the Linux kernel 's powerpc/perf subsystem, specifically in the fsl_emb_pmu_del() function. The root cause is an unmatched put_cpu_var(cpu_hw_events) call at the 'out:' label: when event->hw.idx is negative, the function early-returns without the ...

CVE-2026-80626

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matching getcpuvar after the 'i hw.idx is negative the function jumps to...

CVE-2026-80626 powerpc/perf: fix preempt count underflow in fsl_emb_pmu_del

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fslembpmudel fslembpmudel unconditionally calls putcpuvarcpuhwevents at the 'out:' label, but only calls the matching getcpuvar after the 'i hw.idx is negative the function jumps to...

EUVD-2026-67478

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

CVE-2026-80602

CVE-2026-80602 is an information disclosure vulnerability in the Linux kernel 's perf/x86/amd/lbr subsystem. On AMD processors supporting X86_FEATURE_AMD_LBR_V2 , the hardware branch filter only validates the privilege level of the branch target , not the branch from address. As a result, SYSRET/...

CVE-2026-80602

In the Linux kernel, the following vulnerability has been resolved: perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are exposed to user space even when PERFSAMPLEBRANCHUSER is requested. On AM...

Linux Distros Unpatched Vulnerability : CVE-2026-80671

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf sched: Fix registerpid overflow, strcpy, and BUGON registerpid has several issues when processing untrusted perf.data: 1. Integer overflow: pid + 1...

PT-2026-82926

In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: fix preempt count underflow in fsl emb pmu del fsl emb pmu del unconditionally calls put cpu varcpu hw events at the 'out:' label, but only calls the matching get cpu var after the 'i hw.idx is negative the function...

Linux Distros Unpatched Vulnerability : CVE-2026-80602

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf/x86/amd/lbr: Fix kernel address leakage A user-only branch stack can contain branches that originate from the kernel. As a result, kernel addresses are...

Linux Distros Unpatched Vulnerability : CVE-2026-80670

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - perf tools: Use perfenvgetcputopology in machineresolve machineresolve accesses env-cpual-cpu.socketid after checking al-cpu = 0 and env-cpu != NULL, but withou...

CVE-2026-74753

A flaw was found in the Linux kernel's performance monitoring perf subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of...

SUSE CVE-2026-74753

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perfeventremoveonexec sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perfeventopen...