Linux Kernel Unsupported Perf Events Registration Warning Vulnerability

Vulnerability

A vulnerability in the Linux kernel's tracing system can lead to a warning being triggered when synthetic events are processed. This issue arises because synthetic events lack a proper mechanism to register performance events, causing the tracepoint registration functions to receive a NULL function pointer. As a result, a warning is generated, indicating a problem with the event registration. The vulnerability has been observed in Linux kernel version 6.18.0, in a QEMU virtual machine environment.

Impact

The vulnerability causes a warning to be issued during the registration of synthetic performance events, indicating that the event could not be properly registered. This warning can be seen in the kernel's tracepoint handling code, where it reports the issue with the synthetic event registration.

Reproduction

The vulnerability can be reproduced by attempting to register a synthetic performance event using the 'perf' command. This will trigger a warning indicating that the event could not be registered, due to the lack of a proper registration function for synthetic events.

Remediation

The vulnerability has been addressed in the Linux kernel by modifying the event registration process for synthetic events. Users can upgrade to the latest version of the Linux kernel to apply this fix.

Added: Jan 14, 2026, 3:38 PM
Updated: Jan 14, 2026, 5:41 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
2.5
exploitability
4.3
remediation
7.7
relevance
2.1
threat
4.8
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.