Skip to main content
CVE-2026-98477VulnerabilityPublished Updated

Microsoft · perf/core: Fix NULL pmu_ctx passed to pmu->sched_task()

Affects MicrosoftSource GCVE Database

0
Authoritative record:CVE-2026-98477· Medium

Not known to be exploited · fixed in ec15f6a50183fc01f470af74ad49900fb3731fca : update Microsoft when convenient.

Data as of 28 Oct 2026, 09:27 UTC

Severity
Medium

Rated by Threat Radar · CVSS not yet scored by NVD

Patch
Available – fixed in ec15f6a50183fc01f470af74ad49900fb3731fca, b5409311b606d536cc485f3706c242c2afa93edb, 98181f9721f75f1a544dc563b0d8fed1d5c398d5 +2

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 18 Oct 2026

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponised: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.

What to do

Upgrade to a fixed release listed under Affected software.

Affected software

ProductAffectedFixed in
LinuxLinuxAffected
  • ≥ bd27568117664b8b3e259721393df420ed51f57b, < ec15f6a50183fc01f470af74ad49900fb3731fca
Fixed in
  • ec15f6a50183fc01f470af74ad49900fb3731fca
LinuxLinuxAffected
  • ≥ bd27568117664b8b3e259721393df420ed51f57b, < b5409311b606d536cc485f3706c242c2afa93edb
Fixed in
  • b5409311b606d536cc485f3706c242c2afa93edb
LinuxLinuxAffected
  • ≥ bd27568117664b8b3e259721393df420ed51f57b, < 98181f9721f75f1a544dc563b0d8fed1d5c398d5
Fixed in
  • 98181f9721f75f1a544dc563b0d8fed1d5c398d5
LinuxLinuxAffected
  • ≥ bd27568117664b8b3e259721393df420ed51f57b, < 249a2bd87a0e57dc28f36e992807edc9cae309b5
Fixed in
  • 249a2bd87a0e57dc28f36e992807edc9cae309b5
LinuxLinuxAffected
  • ≥ bd27568117664b8b3e259721393df420ed51f57b, < 36bb85cf36cab15fb611cb44b78a5df06e4e69a2
Fixed in
  • 36bb85cf36cab15fb611cb44b78a5df06e4e69a2
LinuxLinuxAffected
  • =6.2
Fixed in–

Description

This vulnerability involves a NULL pointer passed to the pmu->sched_task() function in Microsoft software versions 3.0 and 4.0. The issue was publicly disclosed on October 20, 2026. No CVSS score or detailed impact information is provided.

References

Community reviews

Loading reviews…