SB20260828103 - Improper Check or Handling of Exceptional Conditions in Linux kernel perf

Description

This security bulletin contains information about 1 vulnerability.

1) Improper Check or Handling of Exceptional Conditions (CVE-ID: CVE-2026-80671)

CWE-ID: CWE-703 - Improper Check or Handling of Exceptional Conditions

CVSSv4: 6.7 [CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]

The vulnerability allows a local user to cause a denial of service.

The vulnerability exists due to improper exceptional condition handling in register_pid() in tools/perf/builtin-sched.c when reallocating sched->tasks while processing untrusted perf.data. A local user can supply crafted input that triggers realloc failure to cause a denial of service.

Direct reassignment of the realloc result can leak the original pointer and leave task state corrupted because the task count is updated before successful reallocation.

Remediation

Install update from vendor's website.

References

• https://git.kernel.org/stable/c/5949d339f5ec98752d56dcd4e36f619a59d513a5
• https://git.kernel.org/stable/c/5ea1dcc9418c4e06ce29ed5170596f497ba86872
• https://git.kernel.org/stable/c/652cea73b7b7b7c622a2be670e44e3c499c6d49f