CVE-2026-64300

A flaw was found in the Linux kernel's perf/aux subsystem. A use-after-free (UAF) vulnerability exists in the map_range() function due to a race condition. This can occur when two performance events share a ring buffer, allowing a local attacker to map a memory page that has already been freed. Exploiting this flaw could lead to arbitrary code execution or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Issue introduced in v6.14. Fixed in v6.18.39 with commit c8b7e113f7b61eef2f017e6329c27c2331058c5a, v7.1.4 with commit 0cff05bd2186020f8706233e261016d149cc24db, and v7.2-rc3 with commit 5948aaf64f81f217a25dcc2bf6c0779bca19566c