CVE-2025-71115

MEDIUM

Linux Kernel - Info Disclosure

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: um: init cpu_tasks[] earlier This is currently done in uml_finishsetup(), but e.g. with KCOV enabled we'll crash because some init code can call into e.g. memparse(), which has coverage annotations, and then the checks in check_kcov_mode() crash because current is NULL. Simply initialize the cpu_tasks[] array statically, which fixes the crash. For the later SMP work, it seems to have not really caused any problems yet, but initialize all of the entries anyway.

Scores

CVSS v3 5.5
EPSS 0.0002
EPSS Percentile 5.3%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-908
Status published
Products (10)
linux/Kernel 6.13.0 - 6.18.3linux
Linux/Linux < 6.13
Linux/Linux 2f681ba4b352cdd5658ed2a96062375a12839755 - 7b5d4416964c07c902163822a30a622111172b01
Linux/Linux 2f681ba4b352cdd5658ed2a96062375a12839755 - dbbf6d47130674640cd12a0781a0fb2a575d0e44
Linux/Linux 6.13
Linux/Linux 6.18.3 - 6.18.*
Linux/Linux 6.19
linux/linux_kernel 6.13
linux/linux_kernel 6.19 rc1 (8 CPE variants)
linux/linux_kernel 6.13.1 - 6.18.3
Published Jan 14, 2026
Tracked Since Feb 18, 2026