CVE-2026-72237

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where kernel addresses are exposed to user space on AMD processors supporting X86 FEATURE BRS (Zen 3). When PERF SAMPLE BRANCH USER is requested, the system may still report entries, such as SYSRET or interrupt returns, where the branch-from addresses originate from the kernel. This occurs because the amd brs match plm() function only validates the branch-to address against requested privilege levels, leaving the branch-from address unchecked. Since BRS lacks hardware branch filtering, this software-based filtering failure results in the leakage of kernel addresses.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.