In the Linux kernel, the following vulnerability has been resolved:
tracing: Make sure trace_printk() can output as soon as it can be used
Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens, and "ftrace_dump_on_oops" is set on the kernel command line, all you get will be:
[ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6
This is because the trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which may be early, but not early enough.
Instead of registering the trace_printk() event (and other ftrace events, which are not trace events) via an early_initcall(), have them registered at the same time that trace_printk() can be used. This way, if there is a crash before early_initcall(), then the trace_printk()s will actually be useful.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade kernel-tools-develUpgrade perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-debuginfoUpgrade kernel-livepatch-4.14.305-227.531Upgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-livepatch-5.10.167-147.601Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade python-perfUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade kernel-tools | May 21, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade kernel-tools-libsUpgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelists | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade python3-perfUpgrade kernel-tools-libsUpgrade bpftoolUpgrade kernelUpgrade kernel-abi-stablelistsUpgrade kernel-tools | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade bpftoolUpgrade python3-perfUpgrade kernel-tools-libs | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-lowlatencyUpgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-gkeUpgrade linux-hwe-5.4Upgrade linux-gkeopUpgrade linux-hweUpgrade linux-awsUpgrade linux-kvmUpgrade linux-raspi-5.4Upgrade linux-xilinx-zynqmpUpgrade linux-aws-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-riscv-5.15Upgrade linux-nvidiaUpgrade linux-azureUpgrade linux-gcpUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-oracleUpgrade linux-bluefieldUpgrade linux-intel-iot-realtimeUpgrade linux-fipsUpgrade linux-intel-iotgUpgrade linux-gcp-5.15Upgrade linux-gcp-5.4Upgrade linux-iotUpgrade linux-azure-5.15Upgrade linux-aws-hweUpgrade linux-gcp-4.15Upgrade linux-raspiUpgrade linux-aws-5.4Upgrade linuxUpgrade linux-gcp-fipsUpgrade linux-hwe-5.15Upgrade linux-ibm-5.4Upgrade linux-nvidia-tegra-5.15Upgrade linux-ibmUpgrade linux-azure-4.15Upgrade linux-oracle-5.4Upgrade linux-azure-fips | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub