CVE-2026-23014 — perf: Ensure swevent hrtimer is properly destroyed

Affected: Linux

In the Linux kernel, the following vulnerability has been resolved:

perf: Ensure swevent hrtimer is properly destroyed

With the change to hrtimer_try_to_cancel() in perf_swevent_cancel_hrtimer() it appears possible for the hrtimer to still be active by the time the event gets freed.

Make sure the event does a full hrtimer_cancel() on the free path by installing a perf_event::destroy handler.

USN-8570-1 — linux-gcp-6.17, linux-realtime-6.17 vulnerabilities

Affected: Ubuntu:24.04:LTS: linux-gcp-6.17, Ubuntu:Pro:Realtime:24.04:LTS: linux-realtime-6.17

Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Foo-over-UDP (FOU); - ARM64 architecture; - x86 architecture; - Block layer subsystem; - Drivers core; - Null block device driver; - Bluetooth drivers; - Counter interface drivers; - DMA engine subsystem; - DPLL subsystem; - GPIO subsystem; - GPU drivers; - I2C subsystem; - IIO ADC drivers; - IIO subsystem; - On-Chip Interconnect management framework; - IOMMU subsystem; - IRQ chip drivers; - Modular ISDN driver; - LED subsystem; - Multiple devices driver; - UACCE accelerator framework; - MMC subsystem; - Ethernet bonding driver; - Network drivers; - Mellanox network drivers; - NVME drivers; - Device tree and open firmware driver; - PHY drivers; - x86 platform drivers; - i.MX PM domains; - SCSI subsystem; - SLIMbus drivers; - SPI subsystem; - TTY drivers; - USB Host Controller drivers; - W1 Dallas's 1-wire bus driver; - Xen hypervisor drivers; - BTRFS file system; - EFI Variable file system; - Ext4 file system; - File systems infrastructure; - FUSE (File system in Userspace); - Network file systems library; - Network file system (NFS) client; - Network file system (NFS) server daemon; - SMB network file system; - Memory Management; - Memory management; - Scheduler infrastructure; - Tracing infrast…

Most recent entries from all

CVE-2026-23014 — perf: Ensure swevent hrtimer is properly destroyed

USN-8570-1 — linux-gcp-6.17, linux-realtime-6.17 vulnerabilities