CVE-2026-23014
perf: Ensure swevent hrtimer is properly destroyed
Résumé
perf: Ensure swevent hrtimer is properly destroyed
Description d'origine
La description telle que publiée par la source (souvent en anglais).
In the Linux kernel, the following vulnerability has been resolved:
perf: Ensure swevent hrtimer is properly destroyed
With the change to hrtimer_try_to_cancel() in
perf_swevent_cancel_hrtimer() it appears possible for the hrtimer to
still be active by the time the event gets freed.
Make sure the event does a full hrtimer_cancel() on the free path by
installing a perf_event::destroy handler.
Paquets affectés
Linux
Kernel
[{"type":"ECOSYSTEM","events":[{"introduced":"6.18.0"},{"fixed":"6.18.6"}]}]
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- BellSoft Alpaquita BELL-CVE-2026-23014 linux-lts Corrigé dans: 6.18.35-r1
- Debian DEBIAN-CVE-2026-23014 linux Corrigé dans: 6.18.8-1
- Ubuntu UBUNTU-CVE-2026-23014 linux-hwe-edge
Références
- advisory github.com
- advisory nvd.nist.gov
- package git.kernel.org
- web git.kernel.org
- web git.kernel.org