Improper control of a resource through its lifetime in Linux kernel - CVE-2026-80626
Published: August 28, 2026
Vulnerability identifier: #VU146257
CSH Severity: Low
CVSS v4: 6.8 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2026-80626
CWE-ID: CWE-664
Exploitation vector: Local access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a local user to cause a denial of service.
The vulnerability exists due to improper resource management in fsl_emb_pmu_del() when removing a perf event with a negative hardware index. A local user can trigger the vulnerable code path to cause a denial of service.
On systems with CONFIG_PREEMPT enabled, the issue can underflow preempt_count and manifest as a "scheduling while atomic" BUG.
Affected software
Linux kernel
How to mitigate CVE-2026-80626
Install security update from vendor's repository.
Linux kernel - update to 7.0 rc3
External References
- https://git.kernel.org/stable/c/5397142d60aa29dcf636f5459d960bfc4f97c42a
- https://git.kernel.org/stable/c/67aeb1eb93d4ffd898a3e74a7f3fe46ee71feb28
- https://git.kernel.org/stable/c/73711688479df333acc134e3730fff1acba1843e
- https://git.kernel.org/stable/c/81e3a86030462824a67d697739cf3f387f4ba350
- https://git.kernel.org/stable/c/9a515e00b00132b6fc3f1dd62dc5204bbda8cb10
- https://git.kernel.org/stable/c/b504fd953664c3f4d176ae8cb594adb3fda9d577
- https://git.kernel.org/stable/c/b89477077c834d94381c7bf07d81193bebefcff9
- https://git.kernel.org/stable/c/c0c7722308c5f303117d8bd555290fdf26b098da