In the Linux kernel, the following vulnerability has been resolved:
accel/qaic: Fix bootlog initialization ordering
As soon as we queue MHI buffers to receive the bootlog from the device, we could be receiving data. Therefore all the resources needed to process that data need to be setup prior to queuing the buffers.
We currently initialize some of the resources after queuing the buffers which creates a race between the probe() and any data that comes back from the device. If the uninitialized resources are accessed, we could see page faults.
Fix the init ordering to close the race.
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade linux | Jul 23, 2026 | Jul 23, 2026 |
| Ubuntu | — | Upgrade linux-image-raspiUpgrade linux-image-generic-64kUpgrade linux-image-6.17.0-1007-oracle-64kUpgrade linux-image-aws-6.17Upgrade linux-image-genericUpgrade linux-image-gcpUpgrade linux-image-virtual-6.17Upgrade linux-image-generic-64k-6.17Upgrade linux-image-oem-24.04cUpgrade linux-image-raspi-6.17Upgrade linux-image-6.14.0-1017-oemUpgrade linux-image-azureUpgrade linux-image-6.17.0-1006-realtimeUpgrade linux-image-realtime-6.17Upgrade linux-image-6.17.0-1008-azureUpgrade linux-image-azure-6.17Upgrade linux-image-aws-64kUpgrade linux-image-oem-24.04aUpgrade linux-image-6.17.0-1007-oracleUpgrade linux-image-oracle-64kUpgrade linux-image-aws-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-oem-24.04Upgrade linux-image-generic-6.17Upgrade linux-image-realtimeUpgrade linux-image-oem-6.14Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1007-aws-64kUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-14-generic-64kUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-oracle-6.17Upgrade linux-image-6.17.0-1008-raspiUpgrade linux-image-6.17.0-1007-awsUpgrade linux-image-6.17.0-1007-gcpUpgrade linux-image-6.17.0-14-genericUpgrade linux-image-oem-24.04bUpgrade linux-image-6.17.0-1007-gcp-64kUpgrade linux-image-aws | Dec 15, 2025 | Nov 12, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub