-

CVE-2026-98477

perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

In the Linux kernel, the following vulnerability has been resolved:

perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

perf_pmu_sched_task() returns early when cpuctx->task_ctx is set, and
cpc->task_epc is only non-NULL while a task context is scheduled in on
this CPU. __perf_pmu_sched_task() therefore always passes NULL:

  Unable to handle kernel NULL pointer dereference at virtual address 00
  pc : armv8pmu_sched_task+0x14/0x50
  Call trace:
   armv8pmu_sched_task+0x14/0x50 (P)
   perf_pmu_sched_task+0xac/0x108
   __perf_event_task_sched_out+0x6c/0xe0

Pass &cpc->epc instead, the CPU-wide context for this PMU, which the
function already dereferences a few lines up to find pmu.

armv8pmu_sched_task() is the only in-tree implementation that
dereferences the argument, and it only reads ->pmu, so the oops needs
BRBE, added in v6.17.
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
HerstellerLinux
≫
Produkt Linux
Default Statusunaffected
Version bd27568117664b8b3e259721393df420ed51f57b
Version < 98181f9721f75f1a544dc563b0d8fed1d5c398d5
Status affected
Version bd27568117664b8b3e259721393df420ed51f57b
Version < b5409311b606d536cc485f3706c242c2afa93edb
Status affected
Version bd27568117664b8b3e259721393df420ed51f57b
Version < 249a2bd87a0e57dc28f36e992807edc9cae309b5
Status affected
Version bd27568117664b8b3e259721393df420ed51f57b
Version < ec15f6a50183fc01f470af74ad49900fb3731fca
Status affected
Version bd27568117664b8b3e259721393df420ed51f57b
Version < 36bb85cf36cab15fb611cb44b78a5df06e4e69a2
Status affected
HerstellerLinux
≫
Produkt Linux
Default Statusaffected
Version 6.2
Status affected
Version 0
Version < 6.2
Status unaffected
Version <= 6.6.*
Version 6.6.160
Status unaffected
Version <= 6.12.*
Version 6.12.112
Status unaffected
Version <= 6.18.*
Version 6.18.55
Status unaffected
Version <= 7.2.*
Version 7.2.9
Status unaffected
Version <= *
Version 7.3
Status unaffected
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.17% 0.057
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
Es wurden noch keine Informationen zu CWE veröffentlicht.
https://git.kernel.org/stable/c/b5409311b606d536cc485f3706c242c2afa93edb
https://git.kernel.org/stable/c/249a2bd87a0e57dc28f36e992807edc9cae309b5
https://git.kernel.org/stable/c/ec15f6a50183fc01f470af74ad49900fb3731fca
https://git.kernel.org/stable/c/36bb85cf36cab15fb611cb44b78a5df06e4e69a2
https://git.kernel.org/stable/c/98181f9721f75f1a544dc563b0d8fed1d5c398d5