coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable

MITRE NVD CVE.ORG JSON API

Summary

CVECVE-2026-90273
StatePUBLISHED
AssignerLinux
Source PriorityCVE Program / NVD first with legacy fallback
Published2026-09-17 17:17:23 UTC
Updated2026-10-21 13:20:46 UTC
DescriptionIn the Linux kernel, the following vulnerability has been resolved: coresight: etm4x: missing cscfg_csdev_disable_active_config() in perf enable In the perf enable path, there are missing cases where cscfg_csdev_disable_active_config() is not called: - Branch broadcast is selected but not supported by the hardware - etm4_enable_hw() fails This can lead to a leak of config_desc->active_cnt. Fix this by properly calling cscfg_csdev_disable_active_config() in these error paths.

Risk And Classification

EPSS: 0.002060000 probability, percentile 0.101470000 (date 2026-10-21)

Vendor Declared Affected Products

SourceVendorProductVersionPlatforms
CNA Linux Linux affected 810ac401db1fe432020d7936a199591000de8279 ba63c62d4252f6bc58fd2a567075c72d03332562 git Not specified
CNA Linux Linux affected 810ac401db1fe432020d7936a199591000de8279 26f9e89bad5a7e3005d3dc97a2e2fa6d6b2b8bb6 git Not specified
CNA Linux Linux affected 810ac401db1fe432020d7936a199591000de8279 d5f3dae82705d9388434892915008da3bb83c4ba git Not specified
CNA Linux Linux affected 810ac401db1fe432020d7936a199591000de8279 7e4f2702bbadbde887a5d8897297720a7f037ee5 git Not specified
CNA Linux Linux affected 810ac401db1fe432020d7936a199591000de8279 0a47f0be6557b4a851addd430383a4dc7ee08752 git Not specified
CNA Linux Linux affected 5.15 Not specified
CNA Linux Linux unaffected 5.15 semver Not specified
CNA Linux Linux unaffected 6.6.160 6.6.* semver Not specified
CNA Linux Linux unaffected 6.12.114 6.12.* semver Not specified
CNA Linux Linux unaffected 6.18.57 6.18.* semver Not specified
CNA Linux Linux unaffected 7.2.6 7.2.* semver Not specified
CNA Linux Linux unaffected 7.3 * original_commit_for_fix Not specified

References

ReferenceSourceLinkTags
git.kernel.org/stable/c/0a47f0be6557b4a851addd430383a4dc7ee08752 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/d5f3dae82705d9388434892915008da3bb83c4ba 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/7e4f2702bbadbde887a5d8897297720a7f037ee5 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/26f9e89bad5a7e3005d3dc97a2e2fa6d6b2b8bb6 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
git.kernel.org/stable/c/ba63c62d4252f6bc58fd2a567075c72d03332562 416baaa9-dc9f-4396-8d5f-8c081fb06d67 git.kernel.org
CVE Program record CVE.ORG www.cve.org canonical
NVD vulnerability detail NVD nvd.nist.gov canonical, analysis

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report