CVE-2026-97443 (GCVE-0-2026-97443)

Vulnerability from cvelistv5 – Published: 2026-09-24 16:03 – Updated: 2026-09-25 12:44
VLAI
Title
perf/ftrace: Fix WARNING in __unregister_ftrace_function
Summary
In the Linux kernel, the following vulnerability has been resolved: perf/ftrace: Fix WARNING in __unregister_ftrace_function perf_ftrace_function_unregister() unconditionally calls unregister_ftrace_function() without checking whether the ftrace_ops was ever successfully registered. This triggers a WARN_ON in __unregister_ftrace_function() when the ops doesn't have FTRACE_OPS_FL_ENABLED set. This can happen during perf_event_alloc() error cleanup when perf_trace_destroy() is called via __free_event() on an event whose ftrace_ops registration failed or was already torn down by perf_try_init_event()'s err_destroy path. The call path is: perf_event_alloc() error cleanup -> __free_event() -> event->destroy() [tp_perf_event_destroy] -> perf_trace_destroy() -> perf_trace_event_close() -> TRACE_REG_PERF_CLOSE -> perf_ftrace_function_unregister() -> unregister_ftrace_function() -> __unregister_ftrace_function() -> WARN_ON(!(ops->flags & FTRACE_OPS_FL_ENABLED)) Fix this by checking FTRACE_OPS_FL_ENABLED before attempting to unregister. If the ops is not enabled, just free the filter and return success.
Severity
No CVSS data available.
Assigner
References
Impacted products
Vendor Product Version CPE status
Linux Linux Affected: 7ef5aa081f989ecfecc1df02068a80aebbd3ec31 , < df097713b56ffac5eed32a9be2e7d27ac48d9087 (git)
Affected: c70ca298036c58a88686ff388d3d367e9d21acf0 , < 7f845820afaad339341c2ae42bc7fdec175df9ea (git)
Affected: c70ca298036c58a88686ff388d3d367e9d21acf0 , < 9581123304b23049437324038698af9fb56ee663 (git)
Affected: 315a50c6b1c6ce191f19f3372935d8e2ed9b53a6 (git)
Affected: 1209b0b29fd472e7dbd2b06544b019dd9f9b7e51 (git)
Affected: 6.12.24 , < 6.12.111 (semver)
Affected: 6.13.12 , < 6.14 (semver)
Affected: 6.14.3 , < 6.15 (semver)
guessed Create a notification for this product.
Linux Linux Affected: 6.15
Unaffected: 0 , < 6.15 (semver)
Unaffected: 6.12.111 , ≤ 6.12.* (semver)
Unaffected: 6.18.53 , ≤ 6.18.* (semver)
Unaffected: 7.2 , ≤ * (original_commit_for_fix)
guessed Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "Linux",
          "programFiles": [
            "kernel/trace/trace_event_perf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "lessThan": "df097713b56ffac5eed32a9be2e7d27ac48d9087",
              "status": "affected",
              "version": "7ef5aa081f989ecfecc1df02068a80aebbd3ec31",
              "versionType": "git"
            },
            {
              "lessThan": "7f845820afaad339341c2ae42bc7fdec175df9ea",
              "status": "affected",
              "version": "c70ca298036c58a88686ff388d3d367e9d21acf0",
              "versionType": "git"
            },
            {
              "lessThan": "9581123304b23049437324038698af9fb56ee663",
              "status": "affected",
              "version": "c70ca298036c58a88686ff388d3d367e9d21acf0",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "315a50c6b1c6ce191f19f3372935d8e2ed9b53a6",
              "versionType": "git"
            },
            {
              "status": "affected",
              "version": "1209b0b29fd472e7dbd2b06544b019dd9f9b7e51",
              "versionType": "git"
            },
            {
              "lessThan": "6.12.111",
              "status": "affected",
              "version": "6.12.24",
              "versionType": "semver"
            },
            {
              "lessThan": "6.14",
              "status": "affected",
              "version": "6.13.12",
              "versionType": "semver"
            },
            {
              "lessThan": "6.15",
              "status": "affected",
              "version": "6.14.3",
              "versionType": "semver"
            }
          ]
        },
        {
          "defaultStatus": "affected",
          "product": "Linux",
          "programFiles": [
            "kernel/trace/trace_event_perf.c"
          ],
          "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
          "vendor": "Linux",
          "versions": [
            {
              "status": "affected",
              "version": "6.15"
            },
            {
              "lessThan": "6.15",
              "status": "unaffected",
              "version": "0",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.12.*",
              "status": "unaffected",
              "version": "6.12.111",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "6.18.*",
              "status": "unaffected",
              "version": "6.18.53",
              "versionType": "semver"
            },
            {
              "lessThanOrEqual": "*",
              "status": "unaffected",
              "version": "7.2",
              "versionType": "original_commit_for_fix"
            }
          ]
        }
      ],
      "cpeApplicability": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.12.111",
                  "versionStartIncluding": "6.12.24",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "6.18.53",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionEndExcluding": "7.2",
                  "versionStartIncluding": "6.15",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.13.12",
                  "vulnerable": true
                },
                {
                  "criteria": "cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:*",
                  "versionStartIncluding": "6.14.3",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/ftrace: Fix WARNING in __unregister_ftrace_function\n\nperf_ftrace_function_unregister() unconditionally calls\nunregister_ftrace_function() without checking whether the ftrace_ops\nwas ever successfully registered. This triggers a WARN_ON in\n__unregister_ftrace_function() when the ops doesn\u0027t have\nFTRACE_OPS_FL_ENABLED set.\n\nThis can happen during perf_event_alloc() error cleanup when\nperf_trace_destroy() is called via __free_event() on an event whose\nftrace_ops registration failed or was already torn down by\nperf_try_init_event()\u0027s err_destroy path.\n\nThe call path is:\n  perf_event_alloc() error cleanup\n    -\u003e __free_event()\n      -\u003e event-\u003edestroy() [tp_perf_event_destroy]\n        -\u003e perf_trace_destroy()\n          -\u003e perf_trace_event_close()\n            -\u003e TRACE_REG_PERF_CLOSE\n              -\u003e perf_ftrace_function_unregister()\n                -\u003e unregister_ftrace_function()\n                  -\u003e __unregister_ftrace_function()\n                    -\u003e WARN_ON(!(ops-\u003eflags \u0026 FTRACE_OPS_FL_ENABLED))\n\nFix this by checking FTRACE_OPS_FL_ENABLED before attempting to\nunregister. If the ops is not enabled, just free the filter and\nreturn success."
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-09-25T12:44:20.881Z",
        "orgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "shortName": "Linux"
      },
      "references": [
        {
          "url": "https://git.kernel.org/stable/c/df097713b56ffac5eed32a9be2e7d27ac48d9087"
        },
        {
          "url": "https://git.kernel.org/stable/c/7f845820afaad339341c2ae42bc7fdec175df9ea"
        },
        {
          "url": "https://git.kernel.org/stable/c/9581123304b23049437324038698af9fb56ee663"
        }
      ],
      "title": "perf/ftrace: Fix WARNING in __unregister_ftrace_function",
      "x_generator": {
        "engine": "bippy-1.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
    "assignerShortName": "Linux",
    "cveId": "CVE-2026-97443",
    "datePublished": "2026-09-24T16:03:57.790Z",
    "dateReserved": "2026-09-24T14:53:16.870Z",
    "dateUpdated": "2026-09-25T12:44:20.881Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2026-97443",
      "date": "2026-09-25",
      "epss": "0.00166",
      "percentile": "0.0519"
    },
    "nvd": {
      "cve": {
        "affected": [
          {
            "affectedData": [
              {
                "defaultStatus": "unaffected",
                "product": "Linux",
                "programFiles": [
                  "kernel/trace/trace_event_perf.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "lessThan": "df097713b56ffac5eed32a9be2e7d27ac48d9087",
                    "status": "affected",
                    "version": "7ef5aa081f989ecfecc1df02068a80aebbd3ec31",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "7f845820afaad339341c2ae42bc7fdec175df9ea",
                    "status": "affected",
                    "version": "c70ca298036c58a88686ff388d3d367e9d21acf0",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "9581123304b23049437324038698af9fb56ee663",
                    "status": "affected",
                    "version": "c70ca298036c58a88686ff388d3d367e9d21acf0",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "315a50c6b1c6ce191f19f3372935d8e2ed9b53a6",
                    "versionType": "git"
                  },
                  {
                    "status": "affected",
                    "version": "1209b0b29fd472e7dbd2b06544b019dd9f9b7e51",
                    "versionType": "git"
                  },
                  {
                    "lessThan": "6.12.111",
                    "status": "affected",
                    "version": "6.12.24",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.14",
                    "status": "affected",
                    "version": "6.13.12",
                    "versionType": "semver"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "affected",
                    "version": "6.14.3",
                    "versionType": "semver"
                  }
                ]
              },
              {
                "defaultStatus": "affected",
                "product": "Linux",
                "programFiles": [
                  "kernel/trace/trace_event_perf.c"
                ],
                "repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
                "vendor": "Linux",
                "versions": [
                  {
                    "status": "affected",
                    "version": "6.15"
                  },
                  {
                    "lessThan": "6.15",
                    "status": "unaffected",
                    "version": "0",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.12.*",
                    "status": "unaffected",
                    "version": "6.12.111",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "6.18.*",
                    "status": "unaffected",
                    "version": "6.18.53",
                    "versionType": "semver"
                  },
                  {
                    "lessThanOrEqual": "*",
                    "status": "unaffected",
                    "version": "7.2",
                    "versionType": "original_commit_for_fix"
                  }
                ]
              }
            ],
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "In the Linux kernel, the following vulnerability has been resolved:\n\nperf/ftrace: Fix WARNING in __unregister_ftrace_function\n\nperf_ftrace_function_unregister() unconditionally calls\nunregister_ftrace_function() without checking whether the ftrace_ops\nwas ever successfully registered. This triggers a WARN_ON in\n__unregister_ftrace_function() when the ops doesn\u0027t have\nFTRACE_OPS_FL_ENABLED set.\n\nThis can happen during perf_event_alloc() error cleanup when\nperf_trace_destroy() is called via __free_event() on an event whose\nftrace_ops registration failed or was already torn down by\nperf_try_init_event()\u0027s err_destroy path.\n\nThe call path is:\n  perf_event_alloc() error cleanup\n    -\u003e __free_event()\n      -\u003e event-\u003edestroy() [tp_perf_event_destroy]\n        -\u003e perf_trace_destroy()\n          -\u003e perf_trace_event_close()\n            -\u003e TRACE_REG_PERF_CLOSE\n              -\u003e perf_ftrace_function_unregister()\n                -\u003e unregister_ftrace_function()\n                  -\u003e __unregister_ftrace_function()\n                    -\u003e WARN_ON(!(ops-\u003eflags \u0026 FTRACE_OPS_FL_ENABLED))\n\nFix this by checking FTRACE_OPS_FL_ENABLED before attempting to\nunregister. If the ops is not enabled, just free the filter and\nreturn success."
          }
        ],
        "id": "CVE-2026-97443",
        "lastModified": "2026-09-25T13:17:28.023",
        "metrics": {},
        "published": "2026-09-24T17:17:22.550",
        "references": [
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/7f845820afaad339341c2ae42bc7fdec175df9ea"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/9581123304b23049437324038698af9fb56ee663"
          },
          {
            "source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
            "url": "https://git.kernel.org/stable/c/df097713b56ffac5eed32a9be2e7d27ac48d9087"
          }
        ],
        "sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
        "vulnStatus": "Received"
      }
    },
    "suse_vex": {
      "aggregate_severity": "not set",
      "current_release_date": "2026-09-24T23:45:58Z",
      "cve": "CVE-2026-97443",
      "id": "CVE-2026-97443",
      "initial_release_date": "2026-09-24T23:45:58Z",
      "source": "SUSE CSAF VEX",
      "status": "interim",
      "title": "SUSE CVE CVE-2026-97443",
      "url": "https://ftp.suse.com/pub/projects/security/csaf-vex/cve-2026-97443.json",
      "version": "2"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.