Race Condition Vulnerability in Linux Kernel's Coresight Product by Linux Foundation

CVE-2026-46272

What is CVE-2026-46272?

A race condition vulnerability has been identified in the Coresight module of the Linux kernel, which occurs when both perf mode and sysfs mode are enabled simultaneously. This can lead to inconsistent behavior due to a mishandling of resource allocation within critical sections. Specifically, the shared spinlock mechanism fails to adequately manage the interactions between these modes, ultimately triggering a warning when the system attempts to enable hardware in sysfs mode while perf mode is active. A fix has been implemented to ensure that sysfs mode checks whether perf mode is currently running before proceeding with hardware allocation, thus preventing resource contention and ensuring system stability.

References