CVE-2025-71115: um: init cpu_tasks[] earlier
In the Linux kernel, the following vulnerability has been resolved:
um: init cputasks[] earlier
This is currently done in umlfinishsetup(), but e.g. with KCOV enabled we'll crash because some init code can call into e.g. memparse(), which has coverage annotations, and then the checks in checkkcovmode() crash because current is NULL.
Simply initialize the cputasks[] array statically, which fixes the crash. For the later SMP work, it seems to have not really caused any problems yet, but initialize all of the entries anyway.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-71115?
CVE-2025-71115 is classified as a high severity vulnerability due to the potential for crashes in the Linux kernel.
How do I fix CVE-2025-71115?
To fix CVE-2025-71115, upgrade your Linux kernel to the latest patched version that addresses this vulnerability.
What systems are affected by CVE-2025-71115?
CVE-2025-71115 affects the Linux kernel, particularly systems where KCOV is enabled.
What is the impact of CVE-2025-71115?
The impact of CVE-2025-71115 includes system crashes due to improper initialization in the kernel.
When was CVE-2025-71115 publicly disclosed?
CVE-2025-71115 was publicly disclosed as part of security updates to the Linux kernel.