CVE-2026-97526

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A kernel panic occurs when CPUs are hotplug added during the execution of the perf stat command using the pai crypto/CRYPTO ALL/ event. The issue stems from a missing allocation of per-CPU data structures for newly added CPUs. When the scheduler executes the PMU callback function pai add() to install PMU support for a new CPU, the instructions involving this cpu ptr(pai root[idx].mapptr) return a NULL pointer. Because the variable cpump is subsequently used without validation, the system crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.