CVE-2026-74753

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where perf event open() accepts events in the EXIT state as group leaders because early validation only rejects REVOKED and DEAD events. This occurs after perf event remove on exec() sets remove-on-exec events to the EXIT state and detaches their group relationships, while the file descriptor remains open. Consequently, a new sibling can be linked to the detached leader. When the leader is closed, perf group detach() skips the new sibling because the PERF ATTACH GROUP bit is already clear, causing the sibling to retain a group leader pointer to the freed event.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.