CVE-2026-23271

Advisory lineage Upstream: 0 Downstream: 9
Analyzed
Published: 20 Mar 2026, 08:08
Last modified:14 Jul 2026, 12:46

Vulnerability Summary

Overall Risk (default)
medium
31/100
CVSS Score
7.8 HIGH
v3.1 (cve.org)
EPSS Score
0.1% LOW
0% probability 0.00%
KEV
Not listed
Ransomware
No reports
Public exploits
None found
Dark Web
Not detected

Timeline

20 Mar 2026, 08:08
Published
Vulnerability first disclosed
14 Jul 2026, 12:46
Last Modified
Vulnerability information updated

Description

In the Linux kernel, the following vulnerability has been resolved: perf: Fix __perf_event_overflow() vs perf_remove_from_context() race Make sure that __perf_event_overflow() runs with IRQs disabled for all possible callchains. Specifically the software events can end up running it with only preemption disabled. This opens up a race vs perf_event_exit_event() and friends that will go and free various things the overflow path expects to be present, like the BPF program.

CVSS Metrics

  • v3.1•HIGH•Score: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Trends

Current EPSS score: 0.10%• Percentile: 1%

Techniques & Countermeasures

  • CWE-362•Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

    The product contains a concurrent code sequence that requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence operating concurrently.

Affected Systems

  • linux•linux

    ≥ 592903cdcbf606a838056bae6d03fc557806c914, < 4df1a45819e50993cb351682a6ae8e7ed2d233a0 | ≥ 592903cdcbf606a838056bae6d03fc557806c914, < 4f8d5812337871227bb2c98669a87c306a2f86ef | ≥ 592903cdcbf606a838056bae6d03fc557806c914, < 5c48fdc4b4623533d86e279f51531a7ba212eb87 | ≥ 592903cdcbf606a838056bae6d03fc557806c914, < 3f89b61dd504c5b6711de9759e053b082f9abf12 | ≥ 592903cdcbf606a838056bae6d03fc557806c914, < bb190628fe5f2a73ba762a9972ba16c5e895f73e | ≥ 592903cdcbf606a838056bae6d03fc557806c914, < c9bc1753b3cc41d0e01fbca7f035258b5f4db0ae | 2.6.31

  • linux•linux kernel

    ≥ 2.6.31, < 6.1.167 | ≥ 6.2, < 6.6.130 | ≥ 6.7, < 6.12.77 | ≥ 6.13, < 6.18.17 | ≥ 6.19, < 6.19.7 | 7.0:rc1

References (8)