---
id: CVE-2026-97499
title: |-
  In the Linux kernel, the following vulnerability has been resolved:

  coresight: perf: Retrieve path and source from event data

  ETM perf callbacks currently use the per-CPU csdev_src pointer, which
  can race with updates during device reg…
summary: |-
  In the Linux kernel, the following vulnerability has been resolved:

  coresight: perf: Retrieve path and source from event data

  ETM perf callbacks currently use the per-CPU csdev_src pointer, which
  can race with updates during device reg…
severity: none
vendor: Linux
product: Linux
affected:
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    0f4cb08f30011b7625a4fba668fa5c36da5e6637
  - >-
    Linux >= 1da177e4c3f41524e886b7f1b8a0c1fc7321cac2 <
    f37bc31447c0ddafedb25e3c4a4f4e2284034247
  - Linux < 6.18.53
  - Linux (all versions)
published: '2026-09-24'
updated: '2026-09-24'
sourceUpdated: '2026-09-24T17:17:27.630'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-97499'
references:
  - url: 'https://git.kernel.org/stable/c/0f4cb08f30011b7625a4fba668fa5c36da5e6637'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
  - url: 'https://git.kernel.org/stable/c/f37bc31447c0ddafedb25e3c4a4f4e2284034247'
    label: 416baaa9-dc9f-4396-8d5f-8c081fb06d67
tags:
  - nvd
  - cve.org
ingestedAt: '2026-09-24T16:47:15.864Z'
---

## Overview

In the Linux kernel, the following vulnerability has been resolved:

coresight: perf: Retrieve path and source from event data

ETM perf callbacks currently use the per-CPU csdev_src pointer, which
can race with updates during device registration and unregistration.

The AUX setup already builds and stores the path in the event data.
Use this path to retrieve the source instead of csdev_src to avoid
the race.

Export coresight_get_source() and add etm_event_get_ctxt_path() to
retrieve the context's path and its source with READ_ONCE() /
WRITE_ONCE() accessors. Give the comments to explain why this
approach is safe when pause or resume callbacks preempt the disable
callback (e.g. via NMI).

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.