Riskcovery

CVE-2026-31782

perf/x86: Fix potential bad container_of in intel_pmu_hw_config

State
Published
Severity
7.8 High
Published
May 1, 2026
Updated
Aug 5, 2026
Reserved
Mar 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

perf/x86: Fix potential bad container_of in intel_pmu_hw_config

Auto counter reload may have a group of events with software events present within it. The software event PMU isn't the x86_hybrid_pmu and a container_of operation in intel_pmu_set_acr_caused_constr (via the hybrid helper) could cause out of bound memory reads. Avoid this by guarding the call to intel_pmu_set_acr_caused_constr with an is_x86_event check.

Scores

CVSSScoreVectorSource
3.17.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HLinux

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • ec980e4facef8110f6fce27e5b6344660117f01f to before e435a30ca6fe14c9611b1fc731c98a6d28410247Affected
  • ec980e4facef8110f6fce27e5b6344660117f01f to before bfee04838f636d064bc92075c65c95f739003804Affected
  • ec980e4facef8110f6fce27e5b6344660117f01f to before dbde07f06226438cd2cf1179745fa1bec5d8914aAffected
LinuxLinux
  • 6.16Affected
  • before 6.16Not affected
  • 6.18.22 through 6.18.*Not affected
  • 6.19.12 through 6.19.*Not affected
  • 7.0 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.