CVE-2026-97499 is a vulnerability in Linux Kernel
Published on September 24, 2026
coresight: perf: Retrieve path and source from event data
In the Linux kernel, the following vulnerability has been resolved:
coresight: perf: Retrieve path and source from event data
ETM perf callbacks currently use the per-CPU csdev_src pointer, which
can race with updates during device registration and unregistration.
The AUX setup already builds and stores the path in the event data.
Use this path to retrieve the source instead of csdev_src to avoid
the race.
Export coresight_get_source() and add etm_event_get_ctxt_path() to
retrieve the context's path and its source with READ_ONCE() /
WRITE_ONCE() accessors. Give the comments to explain why this
approach is safe when pause or resume callbacks preempt the disable
callback (e.g. via NMI).
Products Associated with CVE-2026-97499
Want to know whenever a new CVE is published for Linux Kernel? stack.watch will email you.
Affected Versions
Linux:- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below 0f4cb08f30011b7625a4fba668fa5c36da5e6637 is affected.
- Version 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 and below f37bc31447c0ddafedb25e3c4a4f4e2284034247 is affected.
- Before 6.18.53 is affected.
- Version 6.18.53, <= 6.18.* is unaffected.
- Version 7.2, <= * is unaffected.