CVE-2026-98655

A flaw was found in the Linux kernel. An unprivileged local user could exploit this vulnerability to cause an information disclosure, bypassing Kernel Address Space Layout Randomization (KASLR), a security feature that randomizes kernel memory addresses to hinder exploitation. By opening performance monitoring events configured to track kernel code modifications without requiring elevated permissions, an unprivileged user can observe raw kernel instruction addresses. This leaked address information can assist attackers in planning further attacks against the system.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.