CVE-2015-6526: The perf_callchain_user_64 function in arch/powerpc/perf/callchain.c in the Linux kernel before 4.0.2 on pp...

Security readout for executives and security teams

CVE-2015-6526 is a Linux kernel denial-of-service flaw affecting 64-bit PowerPC systems before Linux 4.0.2. A local user could trigger an infinite loop in perf call-chain handling using an unusually deep userspace backtrace. The business risk is disruption on exposed ppc64 hosts, not remote compromise. Exposure is likely limited to ppc64 Linux systems running kernels before 4.0.2 or vendor kernels lacking the backported fix. Systems without local untrusted users or workloads have lower practical exposure, but shared compute and shell-access environments deserve review. Handle this as a targeted stability risk. It is not described as remote compromise, but affected ppc64 systems with local user access could be disrupted. Patch during the next appropriate maintenance cycle, faster for shared or business-critical ppc64 infrastructure. Mitigation focus: Apply vendor kernel updates that include the upstream fix for CVE-2015-6526.; Prioritize ppc64 systems with shared shell, hosting, or multi-tenant workloads.; Review Ubuntu, Oracle, Red Hat, or platform vendor advisories for backport status..

Prepared

Jun 13, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.