Coresight Performance Data Vulnerability in Linux Kernel

CVE-2026-97499

What is CVE-2026-97499?

In a recent update to the Linux kernel, a vulnerability was addressed relating to the Coresight feature. Specifically, the ETM performance callbacks were utilizing a per-CPU source pointer, which could encounter race conditions during device registration and unregistration. This vulnerability has been resolved by modifying the way the path and source are retrieved. Instead of relying on the potentially fraught csdev_src pointer, the system will now use the path built during AUX setup to ensure accurate source retrieval. This change leverages new functions, coresight_get_source() and etm_event_get_ctxt_path(), which provide safer access to context paths using READ_ONCE() and WRITE_ONCE() mechanisms, thus protecting against race conditions during pause or resume callbacks.

References