CVE-2026-98477
Description
In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix NULL pmu_ctx passed to pmu->sched_task() perf_pmu_sched_task() returns early when cpuctx->task_ctx is set, and cpc->task_epc is only non-NULL while a task context is scheduled in on this CPU. __perf_pmu_sched_task() therefore always passes NULL: Unable to handle kernel NULL pointer dereference at virtual address 00 pc : armv8pmu_sched_task+0x14/0x50 Call trace: armv8pmu_sched_task+0x14/0x50 (P) perf_pmu_sched_task+0xac/0x108 __perf_event_task_sched_out+0x6c/0xe0 Pass &cpc->epc instead, the CPU-wide context for this PMU, which the function already dereferences a few lines up to find pmu. armv8pmu_sched_task() is the only in-tree implementation that dereferences the argument, and it only reads ->pmu, so the oops needs BRBE, added in v6.17.
How to fix
- Linux Linux98181f9721f75f1a544dc563b0d8fed1d5c398d5, b5409311b606d536cc485f3706c242c2afa93edb, 249a2bd87a0e57dc28f36e992807edc9cae309b5, ec15f6a50183fc01f470af74ad49900fb3731fca, 36bb85cf36cab15fb611cb44b78a5df06e4e69a2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | bd27568117664b8b3e259721393df420ed51f57b ≤ v < 98181f9721f75f1a544dc563b0d8fed1d5c398d5, bd27568117664b8b3e259721393df420ed51f57b ≤ v < b5409311b606d536cc485f3706c242c2afa93edb, bd27568117664b8b3e259721393df420ed51f57b ≤ v < 249a2bd87a0e57dc28f36e992807edc9cae309b5, bd27568117664b8b3e259721393df420ed51f57b ≤ v < ec15f6a50183fc01f470af74ad49900fb3731fca, bd27568117664b8b3e259721393df420ed51f57b ≤ v < 36bb85cf36cab15fb611cb44b78a5df06e4e69a2, 6.2 | 98181f9721f75f1a544dc563b0d8fed1d5c398d5, b5409311b606d536cc485f3706c242c2afa93edb, 249a2bd87a0e57dc28f36e992807edc9cae309b5, ec15f6a50183fc01f470af74ad49900fb3731fca, 36bb85cf36cab15fb611cb44b78a5df06e4e69a2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.