CVE-2026-74637

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A use-after-free issue exists in the perf/core component. The perf group detach() function handles leader and sibling detachment inconsistently. When a sibling is detached during a CPU hotplug using DETACH GROUP, it is removed from the leader's sibling list, but its group leader pointer continues to point to the old leader. If the leader is subsequently closed and freed, a PERF IOC FLAG GROUP ioctl operation on the sibling will follow the stale group leader pointer and dereference the freed memory. This fault occurs within the perf ioctl() function, specifically where perf event for each() follows the stale pointer and perf event for each child() dereferences the freed leader's context.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.