CVE-2024-43869

CVE-2024-43869 relates to the Linux kernel perf subsystem where an event leak could occur when a child perf event is freed during exec or file/exec cleanup. The issue arises because the pending task work for a released event could still hold references, potentially leaking the event in some race ...

CVE-2024-43870

CVE-2024-43870 : In the Linux kernel perf subsystem, a window exists during task_exit where pending sigtrap deliveries may be queued but not added to the event’s task_work due to a failure when adding the event’s callback to task_work. This creates a small window in which the event refcount can b...