CVE-2026-31782

A flaw was found in the Linux kernel's performance monitoring unit (perf/x86) component. This vulnerability occurs when the auto counter reload feature processes certain event groups, potentially causing an out-of-bounds memory read. An attacker could exploit this to gain unauthorized access to sensitive information from kernel memory.

Intel PMU hardware config used a bad container_of derivation for grouped events, risking out-of-bounds PMU driver access. Red Hat recommends patched perf-enabled kernels.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.