CVE-2024-26902: Linux kernel · perf: RISCV: Fix panic on pmu overflow handler
Affects Linux kernelSource GCVE Database
Not known to be exploited.
Data as of 30 Oct 2026, 16:33 UTC
Rated High by Threat Radar's AI analysis · No CVSS score from NVD or the CNA
Thin evidence
One scorer or noneExploitation evidence
Disclosed: evidence found.
CVE published 17 Apr 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponized: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.
What to do
AI-suggested
A fix for this vulnerability has been implemented in the Linux kernel source code. Users should update to a Linux kernel version that includes this fix once it is released. Until then, avoid running 'perf record -e branches' on affected RISCV hardware to prevent triggering the panic.
Description
CVE-2024-26902 is a vulnerability in the Linux kernel's perf subsystem for RISCV architectures that causes a kernel panic due to improper bit setting in the pmu overflow handler. This flaw triggers a NULL pointer dereference when running 'perf record -e branches' on specific hardware such as the Sophgo sg2042, leading to a fatal kernel exception and system crash.
References
- git.kernel.org/stable/c/dbf3b0ed79abeb552df4f0d8a6d84cee48b5ee77 (opens in a new tab)
- git.kernel.org/stable/c/3ede8e94de6b834b48b0643385e66363e7a04be9 (opens in a new tab)
- git.kernel.org/stable/c/9f599ba3b9cc4bdb8ec1e3f0feddd41bf9d296d6 (opens in a new tab)
- git.kernel.org/stable/c/34b567868777e9fd39ec5333969728a7f0cf179c (opens in a new tab)