In the Linux kernel, the following vulnerability has been resolved:
tracing: Make sure trace_printk() can output as soon as it can be used
Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens, and "ftrace_dump_on_oops" is set on the kernel command line, all you get will be:
[ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6
This is because the trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which may be early, but not early enough.
Instead of registering the trace_printk() event (and other ftrace events, which are not trace events) via an early_initcall(), have them registered at the same time that trace_printk() can be used. This way, if there is a crash before early_initcall(), then the trace_printk()s will actually be useful.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade python-perfUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-develUpgrade bpftool-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernelUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-livepatch-4.14.305-227.531Upgrade kernel-headersUpgrade kernel-debuginfoUpgrade perf-debuginfo | May 21, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade bpftoolUpgrade python3-perf | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade bpftoolUpgrade kernel-tools-libsUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-gcp-fipsUpgrade linux-azure-4.15Upgrade linux-oracle-5.4Upgrade linux-oracle-5.15Upgrade linux-gkeUpgrade linux-aws-fipsUpgrade linux-ibm-5.4Upgrade linux-hwe-5.15Upgrade linux-awsUpgrade linux-hwe-5.4Upgrade linux-intel-iot-realtimeUpgrade linux-lowlatency-hwe-5.15Upgrade linux-bluefieldUpgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-azure-5.4Upgrade linux-aws-5.15Upgrade linux-kvmUpgrade linux-fipsUpgrade linux-oracleUpgrade linux-gcpUpgrade linux-azureUpgrade linux-nvidiaUpgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-riscv-5.15Upgrade linuxUpgrade linux-aws-5.4Upgrade linux-lowlatencyUpgrade linux-aws-hweUpgrade linux-azure-fipsUpgrade linux-iotUpgrade linux-raspiUpgrade linux-azure-5.15Upgrade linux-gcp-4.15Upgrade linux-gcp-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-ibmUpgrade linux-nvidia-tegra-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub