{"id":"CVE-2026-99125","revision":"3d6cbaf6beec4ec5bff7cb06c0b94d94","records":[{"revision":"3d6cbaf6beec4ec5bff7cb06c0b94d94","observedAt":"2026-10-28T11:27:43.363+00:00","statement":{"source":"cve-program","id":"CVE-2026-99125","aliases":[],"title":"s390/pai: Handle multiple PMU stop callback invocations","description":"In the Linux kernel, the following vulnerability has been resolved:\n\ns390/pai: Handle multiple PMU stop callback invocations\n\nHandle the following scenario:\nThe kernel protects itself against a very high sampling load and\nthrottles the sampling using:\n\n  perf_event_throttle() --> PMU->stop()\n\nShortly later the scheduler may terminate the task and removes it from the\nCPU. It again calls\n\n  PMU->stop()\n\nwhich results in two invocations of PMU->stop() called back to back.\nProtect against this and check the PERF_HES_STOPPED bit on function\nentry.  If it is already set return.\nClear bit PERF_HES_STOPPED in PMU->start().\n\nProhibit ioctl(fd, PERF_EVENT_IOC_PERIOD, ...) call for this event.\nIt sets perf_event::event_limit to a positive value and causes\nperf_event_overflow() to invoke pai_stop() call back function when\nperf_event::event_limit hits zero. This is not supported because the\nsample events CRYPTO_ALL and NNPA_ALL are only taken at schedule out\nof a task.\n\nUse list_for_each_entry_safe() for safe iteration over syswide_list\nin pai_have_samples().","state":0,"publishedAt":"2026-10-28T10:34:40.025+00:00","modifiedAt":"2026-10-28T10:34:40.025+00:00","affected":[{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"unaffected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/s390/kernel/perf_pai.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"9f66572f2889a5e72a9d7e17787e52f03b1f7bd8\",\n                            \"lessThan\": \"cf348ec613f75b9774291e47b804fd7010835a6c\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        },\n                        {\n                            \"version\": \"9f66572f2889a5e72a9d7e17787e52f03b1f7bd8\",\n                            \"lessThan\": \"f3110e969ad226ffbb2d9b4bf5387e68d0d9ef40\",\n                            \"status\": \"affected\",\n                            \"versionType\": \"git\"\n                        }\n                    ]\n                }"},{"ecosystem":"Vendor product","name":"Linux","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"Linux\",\n                    \"vendor\": \"Linux\",\n                    \"defaultStatus\": \"affected\",\n                    \"repo\": \"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git\",\n                    \"programFiles\": [\n                        \"arch/s390/kernel/perf_pai.c\"\n                    ],\n                    \"versions\": [\n                        {\n                            \"version\": \"6.11\",\n                            \"status\": \"affected\"\n                        },\n                        {\n                            \"version\": \"0\",\n                            \"lessThan\": \"6.11\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.2.13\",\n                            \"lessThanOrEqual\": \"7.2.*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"semver\"\n                        },\n                        {\n                            \"version\": \"7.3\",\n                            \"lessThanOrEqual\": \"*\",\n                            \"status\": \"unaffected\",\n                            \"versionType\": \"original_commit_for_fix\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["https://git.kernel.org/stable/c/cf348ec613f75b9774291e47b804fd7010835a6c","https://git.kernel.org/stable/c/f3110e969ad226ffbb2d9b4bf5387e68d0d9ef40"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-99125","license":"CVE Program Terms of Use","key":"cve-program:CVE-2026-99125","identifiers":["CVE-2026-99125"]},"retained":false,"historicalAffected":[]}],"coverage":[]}