CVE-2026-98790

perf: Fix race between perf_event_exit_task() and perf_pending_task()

State
Published
Severity
Not scored
Published
Oct 18, 2026
Updated
Oct 30, 2026
Reserved
Sep 25, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix race between perf_event_exit_task() and perf_pending_task()

A race condition exists between perf_event_exit_task() and perf_pending_task() during begin_new_exec().

During begin_new_exec(), perf_event_exit_task() may be called, and the PF_EXITING flag is not set on task. So perf_sigtrap() continues to execute and triggers WARN_ON_ONCE(event->ctx->task != current).

Since both task exit and exec paths can call perf_event_exit_task() which sets ctx->task to TASK_TOMBSTONE, fix this by explicitly checking if event->ctx->task equals TASK_TOMBSTONE and dropping the redundant PF_EXITING check.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before 6e454fbe3e646d119ab75e907035950e0e857c09Affected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before a8a6fe5601fa2d2c0fbfb3e531a1063f73c1eae3Affected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before 655acfa713bce9ae9c81a654459890c2f58cb4e8Affected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before 672b8a9ce8f51b991481dfde26fba5cc4340a91aAffected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before 524063fea29f8a841e49927ea7a8085194ad3ec2Affected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before 81e61e3f8befa1bae3ec8e779d8ada5e5e362c21Affected
  • 97ba62b278674293762c3d91f724f1bb922f04e0 to before ffb684f2aa141eeb0caa6308422e7e05d1ded7c4Affected
LinuxLinux
  • 5.13Affected
  • before 5.13Not affected
  • 5.15.224 through 5.15.*Not affected
  • 6.1.191 through 6.1.*Not affected
  • 6.6.160 through 6.6.*Not affected
  • 6.12.113 through 6.12.*Not affected
  • 6.18.56 through 6.18.*Not affected
  • 7.2.10 through 7.2.*Not affected
  • 7.3 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.