CVE-2026-98790

CVE-2026-98790

published October 18, 2026

CVSS
—
EPSS
0%
Percentile
5.7
In the wild
Unconfirmed
What it is

In the Linux kernel, the following vulnerability has been resolved:

perf: Fix race between perf_event_exit_task() and perf_pending_task()

A race condition exists between perf_event_exit_task() and

perf_pending_task() during begin_new_exec().

During begin_new_exec(), perf_event_exit_task() may be called, and the

PF_EXITING flag is not set on task. So perf_sigtrap() continues to execute

and triggers WARN_ON_ONCE(event->ctx->task != current).

Since both task exit and exec paths can call perf_event_exit_task() which

sets ctx->task to TASK_TOMBSTONE, fix this by explicitly checking if

event->ctx->task equals TASK_TOMBSTONE and dropping the redundant

PF_EXITING check.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00168 · 5.7th percentile
Published
2026-10-18T20:17Z
References (5)
EPSS history
Timeline
  • 20 OCT 03:34Z
    EPSS moved — → 0%
    epss
  • 18 OCT 15:48Z
    perf: Fix race between perf_event_exit_task() and perf_pending_task()
    cvelistv5
  • 18 OCT 15:48Z
    perf: Fix race between perf_event_exit_task() and perf_pending_task()
    cvelistv5