CVE-2026-23014

CVE-2026-23014 addresses a vulnerability in the Linux kernel related to the perf subsystem. Specifically, it concerns the improper destruction of a swevent hrtimer, which could remain active even after the associated event is freed. This issue is resolved by ensuring a full hrtimer_cancel() operation is performed during the event's free path via a perf_event::destroy handler. The vulnerability has no assigned CVSS score, indicating an unquantified severity, and its FAUCET Risk Score is low at 17/100. Given its nature, it likely requires local access and specific conditions to trigger, suggesting a high attack complexity and limited direct impact on system integrity or confidentiality. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating a low current threat level.