CVE-2026-74753

A flaw was found in the Linux kernel's performance monitoring (perf) subsystem. This vulnerability allows a local attacker to trigger a use-after-free condition by improperly handling exited events as group leaders. Successful exploitation could lead to a system crash, resulting in a denial of service (DoS), or potentially enable an attacker to escalate privileges.

This vulnerability is rated as having an Important severity because an authenticated local user can exploit this use-after-free condition to compromise kernel memory integrity, potentially achieving arbitrary code execution or causing a complete denial of service. The performance monitoring subsystem is built into standard Red Hat Enterprise Linux kernels and is accessible to local user space, making typical deployments susceptible to local attacks. Although triggering the flaw requires local execution privileges and cannot be initiated remotely, it allows attackers with standard system access to compromise the host kernel.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.