In the Linux kernel, the following vulnerability has been resolved:
tracing: Make sure trace_printk() can output as soon as it can be used
Currently trace_printk() can be used as soon as early_trace_init() is called from start_kernel(). But if a crash happens, and "ftrace_dump_on_oops" is set on the kernel command line, all you get will be:
[ 0.456075] <idle>-0 0dN.2. 347519us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 353141us : Unknown type 6 [ 0.456075] <idle>-0 0dN.2. 358684us : Unknown type 6
This is because the trace_printk() event (type 6) hasn't been registered yet. That gets done via an early_initcall(), which may be early, but not early enough.
Instead of registering the trace_printk() event (and other ftrace events, which are not trace events) via an early_initcall(), have them registered at the same time that trace_printk() can be used. This way, if there is a crash before early_initcall(), then the trace_printk()s will actually be useful.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-debuginfoUpgrade kernel-develUpgrade kernelUpgrade kernel-tools-develUpgrade bpftool-debuginfoUpgrade perfUpgrade perf-debuginfoUpgrade kernel-livepatch-5.10.167-147.601Upgrade kernel-livepatch-4.14.305-227.531Upgrade kernel-headersUpgrade kernel-debuginfo-common-aarch64Upgrade python-perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-livepatch-5.15.93-55.139 | May 21, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-abi-stablelistsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-tools | Jul 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp12 | — | Upgrade kernel-toolsUpgrade kernel-abi-stablelistsUpgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftool | Jun 11, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade kernel-tools-libsUpgrade python3-perfUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-abi-stablelists | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | No solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-gcp-4.15Upgrade linuxUpgrade linux-hwe-5.15Upgrade linux-nvidia-tegra-5.15Upgrade linux-gcp-fipsUpgrade linux-azure-5.15Upgrade linux-oracle-5.15Upgrade linux-aws-fipsUpgrade linux-gkeopUpgrade linux-awsUpgrade linux-ibmUpgrade linux-iotUpgrade linux-lowlatencyUpgrade linux-oracle-5.4Upgrade linux-azure-4.15Upgrade linux-gcp-5.4Upgrade linux-raspiUpgrade linux-azure-fipsUpgrade linux-hwe-5.4Upgrade linux-hweUpgrade linux-gkeUpgrade linux-ibm-5.4Upgrade linux-aws-hweUpgrade linux-aws-5.4Upgrade linux-gcp-5.15Upgrade linux-riscv-5.15Upgrade linux-gcpUpgrade linux-intel-iot-realtimeUpgrade linux-xilinx-zynqmpUpgrade linux-azure-5.4Upgrade linux-raspi-5.4Upgrade linux-bluefieldUpgrade linux-fipsUpgrade linux-nvidiaUpgrade linux-kvmUpgrade linux-aws-5.15Upgrade linux-oracleUpgrade linux-azureUpgrade linux-lowlatency-hwe-5.15Upgrade linux-realtimeUpgrade linux-intel-iotgUpgrade linux-intel-iotg-5.15 | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub