CVE-2026-72236

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the hw perf event init() function where the ev variable, which is controlled by userspace via event->attr.config, is used as an array index. Although bounds checking is performed, the absence of speculation barriers allows for potential speculative execution. Speculative execution is a process where a computer system performs tasks in anticipation of future needs to improve performance, which can be exploited to leak sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.