In the Linux kernel, the following vulnerability has been resolved: perf/core: Fix a refcount leak in attach_perf_ctx_data() The… (CVE-2026-98552)

The vulnerability in the Linux kernel's perf/core component involves a race condition in the attach_perf_ctx_data() function. The global case is protected by a read-write semaphore and shares a single reference count via the perf_ctx_data.global field. However, when racing with the non-global case, the global field may not be set correctly, resulting in a reference count leak. Specifically, concurrent execution on different CPUs can cause the reference count to be incremented incorrectly and the global flag to be missed, leading to improper cleanup and potential resource leaks.

The impact is a reference count leak in the kernel's perf subsystem, which may cause resource leaks and potentially degrade system performance or stability over time. There is no indication of direct code execution or privilege escalation from this vulnerability. No known exploits in the wild have been reported.

A fix for this vulnerability has been implemented in the Linux kernel. Users and administrators should apply the official kernel updates that include this patch to resolve the refcount leak. Since no vendor advisory or patch links are provided here, consult the Linux kernel mailing lists or official kernel release notes for the specific patch and update instructions.