In the Linux kernel, the following vulnerability has been resolved:
um: init cpu_tasks[] earlier
This is currently done in uml_finishsetup(), but e.g. with KCOV enabled we'll crash because some init code can call into e.g. memparse(), which has coverage annotations, and then the checks in check_kcov_mode() crash because current is NULL.
Simply initialize the cpu_tasks[] array statically, which fixes the crash. For the later SMP work, it seems to have not really caused any problems yet, but initialize all of the entries anyway.
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Ubuntu | — | Upgrade linux-image-6.17.0-1011-oracle-64kUpgrade linux-image-oem-24.04Upgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.17.0-1012-aws-64kUpgrade linux-image-genericUpgrade linux-image-realtimeUpgrade linux-image-aws-6.17Upgrade linux-image-virtual-6.17Upgrade linux-image-virtualUpgrade linux-image-6.17.0-1010-realtimeUpgrade linux-image-oracleUpgrade linux-image-gcp-64k-6.17Upgrade linux-image-gcp-64kUpgrade linux-image-6.17.0-1020-oemUpgrade linux-image-aws-64kUpgrade linux-image-6.17.0-1012-gcpUpgrade linux-image-gcp-6.17Upgrade linux-image-6.17.0-1012-gcp-64kUpgrade linux-image-6.17.0-1013-azureUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-6.17.0-1011-oracleUpgrade linux-image-oem-6.17Upgrade linux-image-6.17.0-22-genericUpgrade linux-image-oem-24.04dUpgrade linux-image-raspi-6.17Upgrade linux-image-oracle-64k-6.17Upgrade linux-image-oem-24.04aUpgrade linux-image-generic-64k-6.17Upgrade linux-image-raspiUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-awsUpgrade linux-image-oem-24.04cUpgrade linux-image-6.17.0-1012-awsUpgrade linux-image-realtime-6.17Upgrade linux-image-oracle-64kUpgrade linux-image-oracle-6.17Upgrade linux-image-generic-64kUpgrade linux-image-6.17.0-22-generic-64kUpgrade linux-image-6.17.0-1014-raspiUpgrade linux-image-realtime-hwe-24.04Upgrade linux-image-gcpUpgrade linux-image-azure-6.17Upgrade linux-image-oem-24.04bUpgrade linux-image-generic-6.17Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.17 | Apr 17, 2026 | Jan 14, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub