{"id":"CVE-2026-98790","title":"perf: Fix race between perf_event_exit_task() and perf_pending_task()","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix race between perf_event_exit_task() and perf_pending_task()\n\nA race condition exists between perf_event_exit_task() and\nperf_pending_task() during begin_new_e…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 672b8a9ce8f51b991481dfde26fba5cc4340a91a","Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 524063fea29f8a841e49927ea7a8085194ad3ec2","Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 81e61e3f8befa1bae3ec8e779d8ada5e5e362c21","Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < ffb684f2aa141eeb0caa6308422e7e05d1ded7c4","Linux 5.13"],"published":"2026-10-18","updated":"2026-10-18","sourceUpdated":"2026-10-18T15:48:27.412Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-98790","references":[{"url":"https://git.kernel.org/stable/c/672b8a9ce8f51b991481dfde26fba5cc4340a91a"},{"url":"https://git.kernel.org/stable/c/524063fea29f8a841e49927ea7a8085194ad3ec2"},{"url":"https://git.kernel.org/stable/c/81e61e3f8befa1bae3ec8e779d8ada5e5e362c21"},{"url":"https://git.kernel.org/stable/c/ffb684f2aa141eeb0caa6308422e7e05d1ded7c4"}],"tags":["cve.org"],"ingestedAt":"2026-10-18T16:47:32.486Z","slug":"CVE-2026-98790","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix race between perf_event_exit_task() and perf_pending_task()\n\nA race condition exists between perf_event_exit_task() and\nperf_pending_task() during begin_new_exec().\n\nDuring begin_new_exec(), perf_event_exit_task() may be called, and the\nPF_EXITING flag is not set on task. So perf_sigtrap() continues to execute\nand triggers WARN_ON_ONCE(event->ctx->task != current).\n\nSince both task exit and exec paths can call perf_event_exit_task() which\nsets ctx->task to TASK_TOMBSTONE, fix this by explicitly checking if\nevent->ctx->task equals TASK_TOMBSTONE and dropping the redundant\nPF_EXITING check.\n\n## Affected\n\n- `Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 672b8a9ce8f51b991481dfde26fba5cc4340a91a`\n- `Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 524063fea29f8a841e49927ea7a8085194ad3ec2`\n- `Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < 81e61e3f8befa1bae3ec8e779d8ada5e5e362c21`\n- `Linux >= 97ba62b278674293762c3d91f724f1bb922f04e0 < ffb684f2aa141eeb0caa6308422e7e05d1ded7c4`\n- `Linux 5.13`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}