{
  "cveId": "CVE-2026-93275",
  "url": "https://patchblox.com/security/cve/CVE-2026-93275",
  "summary": "CVE-2026-93275 is fixed in 38 products on 1 platform, first by DEBIAN-CVE-2026-93275, released September 24, 2026. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "perf/x86/intel/pt: Fix stop/start with no update",
  "description": "In the Linux kernel, the following vulnerability has been resolved:  perf/x86/intel/pt: Fix stop/start with no update  If pt_event_stop() is called without PERF_EF_UPDATE flag, then perf_aux_output_end() is not called.  A subsequent call to pt_event_start() will call perf_aux_output_begin() again which violates the rule against nesting and triggers a WARNING in perf_aux_output_begin().  Originally, pt_event_stop() was never called without PERF_EF_UPDATE, because the only code paths to do so are from event overflow, and Intel PT does not do that.  However the introduction of group throttling by commit 9734e25fbf5ae (\u0022perf: Fix the throttle logic for a group\u0022) meant that an Intel PT event could be throttled if it was part of a group.  Throttling calls PMU  -\u003Estop() / -\u003Estart() callbacks without flags.  An example is when AUX area sampling is used. The following commands hit the issue:    echo 10000 \u003E /proc/sys/kernel/perf_event_max_sample_rate    perf record -F32000 --aux-sample -e \u0027{intel_pt//u,cycles:u}\u0027 \\   -- bash -c \u0027for i in \u0060seq 1 100000\u0060 ; do true ; done\u0027  Use PERF_HES_UPTODATE to track whether perf_aux_output_begin() and perf_aux_output_end() are balanced.  A cleared PERF_HES_UPTODATE bit indicates that an AUX output context is still open.  Amend pt_event_start() / pt_event_stop() accordingly so that begin/end stay balanced:   - In non-snapshot mode, stop() always closes the buffer (the buffer may    have run out of space, and that accounting is done by the update), so    a following start() opens a fresh one as before.   - In snapshot/overwrite mode, stop() without PERF_EF_UPDATE leaves the    buffer open so that pt_event_snapshot_aux() can still copy from it,    and start() then only re-enables tracing instead of calling    perf_aux_output_begin() again.  Note that pt_event_del() calls pt_event_stop() with PERF_EF_UPDATE flag set (as is required by the documentation), so a final call to perf_aux_output_end() is assured.",
  "published": "2026-09-24T16:17:24Z",
  "severity": "Low",
  "cvss": 2.5,
  "epss": 0.00189,
  "epssPercentile": 0.08609,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-93275",
  "fixes": [
    {
      "platform": "linux",
      "product": "bpftool6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "bpftool6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.12.110-135.201",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel-livepatch-6.18.54-121.166",
      "release": "amzn 2023",
      "fixedVersion": "1:1.0-0.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.12-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-aarch64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-debuginfo-common-x86_64",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-headers",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-modules-extra-common",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "kernel6.18-tools-devel",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "linux",
      "release": "Debian 14",
      "fixedVersion": "7.2.6-1",
      "fix": "DEBIAN-CVE-2026-93275",
      "url": "https://patchblox.com/security/fix/linux/debian-cve-2026-93275",
      "released": "2026-09-24T19:30:44Z"
    },
    {
      "platform": "linux",
      "product": "microvm-kernel6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.12-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.12.110-135.201.amzn2023",
      "fix": "ALAS2023-2026-3196",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3196",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    },
    {
      "platform": "linux",
      "product": "python3-perf6.18-debuginfo",
      "release": "amzn 2023",
      "fixedVersion": "1:6.18.54-121.166.amzn2023",
      "fix": "ALAS2023-2026-3192",
      "url": "https://patchblox.com/security/fix/linux/alas2023-2026-3192",
      "released": "2026-11-07T01:06:07Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T07:25:28Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}