CVE-2026-89984

A flaw was found in the Linux kernel's perf/x86/intel component. Insufficient validation of privilege levels in the Last Branch Record (LBR) stack allows a local attacker to expose kernel branch records to user space. This information disclosure vulnerability can lead to kernel addresses appearing in user-only branch stacks, potentially revealing sensitive kernel memory layout.

This vulnerability is rated as Moderate impact because exploiting it requires an unprivileged local user executing branch profiling on supported Intel hardware, and the exposure is limited to reading kernel memory pointers. While exposing kernel execution addresses weakens Kernel Address Space Layout Randomization (KASLR), it does not directly permit arbitrary memory modification or system compromise. The issue primarily affects systems running on Intel processors where unprivileged performance monitoring features are accessible.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.