SECUFOCUSNOW
Home›CVE index›CVE-2026-74753
ReviewHigh

CVE-2026-74753

Linux

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perf_event_open() currently accepts that event as a group leader because its early validation rejects only REVOKED and DEAD events. A new sibling can consequently be linked to the detached leader. When the leader is closed, perf_group_detach() observes that its PERF_ATTACH_GROUP bit is already clear and skips the...

CVSS
7.8
EPSS
-
- percentile
CISA KEV
Not listed
Published
2026.08.27
PRIORITY ASSESSMENT

Review

The CVSS severity warrants an early asset and exposure review.

Known exploitationNot established by KEV
Exploit probability-
Technical severityCVSS 7.8

Vulnerability overview

In the Linux kernel, the following vulnerability has been resolved: perf: Reject exited events as group leaders perf_event_remove_on_exec() sets remove-on-exec events to the EXIT state and detaches their group relationships. The event's file descriptor can remain open, however, and perf_event_open() currently accepts that event as a group leader because its early validation rejects only REVOKED and DEAD events. A new sibling can consequently be linked to the detached leader. When the leader is closed, perf_group_detach() observes that its PERF_ATTACH_GROUP bit is already clear and skips the...

Affected product and versions

Product
Linux
Affected versions
>= a2d5d3ee7b6e3953114726b1521e62123ab5b043 < 7a03413f31c196ab3894f988cdce0bb47b4fec42, >= 06ccef0434e98058ddae7bcebc901f93d22b7653 < 7ce010275c531475f9d6e7efb11b9e522c74ed2e, >= 037a3c43edfb597665dd34457cd22b14692f2ba3 < fa091f46c3833fb22384f10eade2b4e1e1d0b278, >= 4cdb1b3ab96eb1b7eb70bc5c82fede334bd60df2, >= 39358e856fb89e62e3c8d7389a2dc4ec33dbe90e, >= 6.6.145 < 6.7, >= 6.12.96 < 6.13, >= 6.18.39 < 6.18.46, >= 7.1.4 < 7.1.10
Fixed versions
No verified fixed-version field is available yet

Recommended response sequence

Confirm exposure before applying a vendor-supported change.

Full remediation guide
  1. 1
    Identify

    Confirm that Linux and an affected version are present.

  2. 2
    Prioritize

    Combine exploitation signals with asset exposure and business criticality.

  3. 3
    Remediate

    Follow the vendor advisory or supported update path and preserve rollback options.

  4. 4
    Verify

    Recheck the version, service health, access paths, and relevant logs.

Technical data

CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CWE
Not available