Out-of-Bound Memory Access in Linux Kernel Affecting Performance Monitoring Units

CVE-2026-31528

What is CVE-2026-31528?

A vulnerability in the Linux kernel involves improper handling of performance monitoring unit (PMU) transactions leading to potential out-of-bound memory access. This issue arises when group scheduling fails and requires a rollback, but the wrong PMU transaction callbacks are invoked. Consequently, when event context cloning occurs, it can lead to improper PMU context inheritance, potentially compromising system stability and security. The vulnerability has been addressed to ensure the correct PMU context is consistently used across all scheduled events, enhancing the integrity of kernel performance monitoring.

References