CVE-2026-23014

perf: Ensure swevent hrtimer is properly destroyed

High · published January 28, 2026

CVSS v3.1
7.8
EPSS
0%
Percentile
1.9
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

perf: Ensure swevent hrtimer is properly destroyed

With the change to hrtimer_try_to_cancel() in

perf_swevent_cancel_hrtimer() it appears possible for the hrtimer to

still be active by the time the event gets freed.

Make sure the event does a full hrtimer_cancel() on the free path by

installing a perf_event::destroy handler.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00123 · 1.9th percentile
Published
2026-01-28T14:24Z
EPSS history
Timeline
  • 28 JAN 14:24Z
    perf: Ensure swevent hrtimer is properly destroyed
    cvelistv5