{"id":"CVE-2026-98790","kind":"vulnerability","aliases":["CVE-2026-98790"],"related":[],"title":"Linux kernel: perf race during exec can trigger a kernel warning","description":"In the Linux kernel, the following vulnerability has been resolved:\n\nperf: Fix race between perf_event_exit_task() and perf_pending_task()\n\nA race condition exists between perf_event_exit_task() and\nperf_pending_task() during begin_new_exec().\n\nDuring begin_new_exec(), perf_event_exit_task() may be called, and the\nPF_EXITING flag is not set on task. So perf_sigtrap() continues to execute\nand triggers WARN_ON_ONCE(event->ctx->task != current).\n\nSince both task exit and exec paths can call perf_event_exit_task() which\nsets ctx->task to TASK_TOMBSTONE, fix this by explicitly checking if\nevent->ctx->task equals TASK_TOMBSTONE and dropping the redundant\nPF_EXITING check.","summary":"A race between perf event teardown and pending perf work during exec can make the kernel hit a WARN_ON_ONCE in perf_sigtrap. The sources describe a kernel warning and do not state a code execution or privilege escalation path.","severity":"unknown","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["linux-kernel","linux-servers","runtime","self-hosted"],"not_affected_if":["unknown"],"how_to_check":"- unknown","fix":"- unknown","status":"open","published_at":"2026-10-18T16:17:32+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","triaged_at":"2026-10-25T05:15:14+00:00","updated_at":"2026-10-25T05:15:14+00:00","category":"runtime","confidence":0.4,"triage":{"at":"2026-10-25T05:15:14Z","model":"claude-haiku-5-5","output":{"fix":"- unknown","reach":"local","title":"Linux kernel: perf race during exec can trigger a kernel warning","impact":"low","summary":"A race between perf event teardown and pending perf work during exec can make the kernel hit a WARN_ON_ONCE in perf_sigtrap. The sources describe a kernel warning and do not state a code execution or privilege escalation path.","category":"runtime","nicknames":[],"who_cares":["linux-kernel","self-hosted","linux-servers"],"confidence":0.4,"needs_auth":"unknown","worst_case":"Kernel warning fires during exec; impact beyond that is not stated","analyst_note":"Check the NVD entry and the upstream kernel commit for affected and fixed kernel versions and whether the race can be triggered by an unprivileged local user.","how_to_check":"- unknown","needs_analyst":true,"not_affected_if":["unknown"],"who_is_affected":"Systems running a Linux kernel build that includes the upstream perf fix; the sources do not list affected kernel versions. unknown","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.00055,"input_tokens":3483,"output_tokens":404,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2026':13A,16A '-98790':14A,17A 'begin':105C,109C 'call':118C,152C 'check':168C,182C 'code':63B 'condit':93C 'continu':132C 'ctx':141C,159C,171C 'current':143C 'cve':12A,15A 'describ':54B 'drop':177C 'equal':173C 'escal':67B 'event':32B,84C,97C,113C,140C,154C,170C 'exec':6A,39B,107C,111C,149C 'execut':64B,134C 'exist':94C 'exit':85C,98C,114C,122C,147C,155C,181C 'explicit':167C 'fix':80C,164C 'flag':123C 'follow':74C 'hit':44B 'host':27B 'kernel':2A,10A,20B,43B,56B,72C 'linux':1A,19B,22B,71C 'linux-kernel':18B 'linux-serv':21B 'make':41B 'may':116C 'new':106C,110C 'path':68B,150C 'pend':35B,89C,102C 'perf':3A,31B,36B,50B,79C,83C,88C,96C,101C,112C,130C,153C 'pf':121C,180C 'privileg':66B 'race':4A,29B,81C,92C 'redund':179C 'resolv':78C 'runtim':24B 'self':26B 'self-host':25B 'server':23B 'set':126C,158C 'sigtrap':51B,131C 'sinc':144C 'sourc':53B 'state':61B 'task':86C,90C,99C,103C,115C,128C,142C,146C,156C,160C,162C,172C,174C 'teardown':33B 'tombston':163C,175C 'trigger':8A,136C 'vulner':75C 'warn':11A,46B,57B,137C 'work':37B","nicknames":[],"mitigations":[],"who_affected":"Systems running a Linux kernel build that includes the upstream perf fix; the sources do not list affected kernel versions. unknown","tier":"C","verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-18T16:17:32+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-98790","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-98790","severity":null,"published_at":"2026-10-18T16:17:32+00:00","modified_at":"2026-10-21T13:21:46+00:00","first_seen_at":"2026-10-23T21:57:16+00:00","fetched_at":"2026-10-23T22:28:56+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}