Review reviewHigh

CVE-2026-64556

Linux

In the Linux kernel, the following vulnerability has been resolved: perf/core: Detach event groups during remove_on_exec perf_event_remove_on_exec() removes events by calling perf_event_exit_event(). For top-level events, this removes the event from the context with DETACH_EXIT only. This can leave inconsistent group state when a removed event is a group leader and the group contains siblings without remove_on_exec. If the group was active, the surviving siblings can remain active and attached to the removed leader's sibling list, but are no longer represented by a valid group leader on the...

CVSS: 7.8
EPSS: -
CISA KEV: Not listed
Published: 2026.07.29

PRIORITY ASSESSMENT

Review review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV

Exploit probability-

Technical severityCVSS 7.8

Vulnerability overview

Affected product and versions

Product: Linux
Affected versions: >= 2e498d0a74e5b88a6689ae1b811f247f91ff188e < 4cdb1b3ab96eb1b7eb70bc5c82fede334bd60df2, >= 2e498d0a74e5b88a6689ae1b811f247f91ff188e < 39358e856fb89e62e3c8d7389a2dc4ec33dbe90e, >= 2e498d0a74e5b88a6689ae1b811f247f91ff188e < a2d5d3ee7b6e3953114726b1521e62123ab5b043, >= 2e498d0a74e5b88a6689ae1b811f247f91ff188e < 06ccef0434e98058ddae7bcebc901f93d22b7653, >= 2e498d0a74e5b88a6689ae1b811f247f91ff188e < 037a3c43edfb597665dd34457cd22b14692f2ba3, >= 5.13
Fixed versions: No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide

1
Identify
Confirm that Linux and an affected version are present.
2
Prioritize
Combine exploitation signals with asset exposure and business criticality.
3
Remediate
Follow the vendor advisory or supported update path and preserve rollback options.
4
Verify
Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE: Not available