Instituto Nacional de ciberseguridad. Sección Incibe
Instituto Nacional de Ciberseguridad. Sección INCIBE-CERT

CVE-2026-97499

Gravedad:
Pendiente de análisis
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
24/09/2026
Última modificación:
24/09/2026

Descripción

*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br /> <br /> coresight: perf: Retrieve path and source from event data<br /> <br /> ETM perf callbacks currently use the per-CPU csdev_src pointer, which<br /> can race with updates during device registration and unregistration.<br /> <br /> The AUX setup already builds and stores the path in the event data.<br /> Use this path to retrieve the source instead of csdev_src to avoid<br /> the race.<br /> <br /> Export coresight_get_source() and add etm_event_get_ctxt_path() to<br /> retrieve the context&amp;#39;s path and its source with READ_ONCE() /<br /> WRITE_ONCE() accessors. Give the comments to explain why this<br /> approach is safe when pause or resume callbacks preempt the disable<br /> callback (e.g. via NMI).

Impacto