The Linux kernel’s perf subsystem contains a race condition within attach_perf_ctx_data that can cause a reference count leak. When a global context allocation races with a non‑global context, the global refcount may be incorrectly incremented or left dangling, leading to a memory leak. The vulnerability relates to CWE-911. If an attacker can repeatedly trigger attach_perf_ctx_data, the leaking memory accumulates and can eventually exhaust system resources, causing a denial of service.

All Linux kernel releases that include the default perf core code are potentially affected. The problem is present in the Linux kernel itself, regardless of distribution, because both vendor entries list Linux:Linux. No specific version range is documented in the advisory, so any kernel that still ships attach_perf_ctx_data without the upstream patch is at risk.

With a CVSS score of 2.5 and EPSS below 1%, the flaw is considered low‑severity and unlikely to be actively exploited in the wild. The vulnerability requires kernel‑level privileges, a conclusion inferred from the fact that attach_perf_ctx_data operates in kernel space, and thus the attack vector is local. Once exploited, an attacker could gradually deplete system memory, leading to service disruption. The issue is not listed in CISA’s KEV catalog, so there is no current evidence of large‑scale exploitation.