CVE-2026-23014: perf: Ensure swevent hrtimer is properly destroyed
In the Linux kernel, the following vulnerability has been resolved:
perf: Ensure swevent hrtimer is properly destroyed
With the change to hrtimertrytocancel() in perfsweventcancelhrtimer() it appears possible for the hrtimer to still be active by the time the event gets freed.
Make sure the event does a full hrtimercancel() on the free path by installing a perfevent::destroy handler.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-23014?
CVE-2026-23014 has a high severity rating due to its potential impact on system stability in the Linux kernel.
How do I fix CVE-2026-23014?
To fix CVE-2026-23014, ensure that you update your Linux kernel to the latest stable version that contains the patch.
What is the impact of CVE-2026-23014?
CVE-2026-23014 can lead to potential system instability as the swevent hrtimer may not be properly destroyed.
Which software is affected by CVE-2026-23014?
CVE-2026-23014 affects the Linux kernel across various distributions that utilize this kernel version.
When was CVE-2026-23014 disclosed?
CVE-2026-23014 was disclosed in 2026, highlighting a necessary fix for the Linux kernel.