CVE-2026-97443
- Source
- https://cve.org/CVERecord?id=CVE-2026-97443
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-97443.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-97443
- Downstream
- Published
- 2026-09-24T16:03:57Z
- Modified
- 2026-10-08T02:52:42Z
- Summary
- perf/ftrace: Fix WARNING in __unregister_ftrace_function
- Details
-
In the Linux kernel, the following vulnerability has been resolved:
perf/ftrace: Fix WARNING in __unregister_ftrace_function
perf_ftrace_function_unregister() unconditionally calls unregister_ftrace_function() without checking whether the ftrace_ops was ever successfully registered. This triggers a WARN_ON in __unregister_ftrace_function() when the ops doesn't have FTRACE_OPS_FL_ENABLED set.
This can happen during perf_event_alloc() error cleanup when perf_trace_destroy() is called via __free_event() on an event whose ftrace_ops registration failed or was already torn down by perf_try_init_event()'s err_destroy path.
The call path is: perf_event_alloc() error cleanup -> __free_event() -> event->destroy() [tp_perf_event_destroy] -> perf_trace_destroy() -> perf_trace_event_close() -> TRACE_REG_PERF_CLOSE -> perf_ftrace_function_unregister() -> unregister_ftrace_function() -> __unregister_ftrace_function() -> WARN_ON(!(ops->flags & FTRACE_OPS_FL_ENABLED))
Fix this by checking FTRACE_OPS_FL_ENABLED before attempting to unregister. If the ops is not enabled, just free the filter and return success.
- Database specific
{ "cna_assigner": "Linux", "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97443.json" }- References
-
- https://git.kernel.org/stable/c/7f845820afaad339341c2ae42bc7fdec175df9ea
- https://git.kernel.org/stable/c/9581123304b23049437324038698af9fb56ee663
- https://git.kernel.org/stable/c/df097713b56ffac5eed32a9be2e7d27ac48d9087
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/97xxx/CVE-2026-97443.json
- https://nvd.nist.gov/vuln/detail/CVE-2026-97443
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected packages
Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Affected ranges
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced7ef5aa081f989ecfecc1df02068a80aebbd3ec31Fixeddf097713b56ffac5eed32a9be2e7d27ac48d9087
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introducedc70ca298036c58a88686ff388d3d367e9d21acf0Fixed7f845820afaad339341c2ae42bc7fdec175df9eaFixed9581123304b23049437324038698af9fb56ee663
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.12.24Fixed6.12.111
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.13.12Fixed6.14
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced6.14.3Fixed6.15
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced315a50c6b1c6ce191f19f3372935d8e2ed9b53a6
- Type
- GIT
- Repo
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
- Events
-
Introduced1209b0b29fd472e7dbd2b06544b019dd9f9b7e51