> CVE-2026-97499

« BACK_TO_HOME
PUBLISHED
2026-09-24 17:17
MODIFIED
2026-09-24 17:17
EPSS (Prob. Exploit)
0.16%
Top 95.7%
DATA SOURCES:
NVD 🔗 2026-09-24 FIRST EPSS 🔗 2026-10-23 OSV 🔗 2026-10-19 MSRC 🔗 2026-09-29

> DESCRIPTION

In the Linux kernel, the following vulnerability has been resolved: coresight: perf: Retrieve path and source from event data ETM perf callbacks currently use the per-CPU csdev_src pointer, which can race with updates during device registration and unregistration. The AUX setup already builds and stores the path in the event data. Use this path to retrieve the source instead of csdev_src to avoid the race. Export coresight_get_source() and add etm_event_get_ctxt_path() to retrieve the context's path and its source with READ_ONCE() / WRITE_ONCE() accessors. Give the comments to explain why this approach is safe when pause or resume callbacks preempt the disable callback (e.g. via NMI).

> AFFECTED_PRODUCTS

ℹ️ Aucun produit affecté n'a encore été publié par NVD pour cette CVE.

> OSV (GOOGLE OPEN SOURCE VULNERABILITIES)

coresight: perf: Retrieve path and source from event data

AFFECTED PACKAGES:
Unknown / Unknown
Linux / Kernel

> HISTORIQUE DES MODIFICATIONS

Première apparition
24/09/2026 17:17
Source: NVD
Total des modifications: 0 Dernière mise à jour: 4 weeks ago

> REFERENCES

https://git.kernel.org/stable/c/0f4cb08f30011b7625a4fba668fa5c36da5e6637
https://git.kernel.org/stable/c/f37bc31447c0ddafedb25e3c4a4f4e2284034247
« BACK_TO_HOME