CVE-2026-68185: LoongArch: Move jump_label_init() before parse_early_param()
In the Linux kernel, the following vulnerability has been resolved:
LoongArch: Move jumplabelinit() before parseearlyparam()
When enabling both CONFIGMEMALLOCPROFILING=y and CONFIGMEMALLOCPROFILINGENABLEDBYDEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.memprofiling=0' will cause the kernel failed to boot.
After analysis, this is because jumplabelinit() must be called before parseearlyparam(), the early param handlers may modify static keys by staticbranchenable/disable().
Fix this by moving jumplabelinit() to before parseearlyparam(). The solution is similar to other architectures.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.101-1 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 7.1.6-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.101-1~deb12u1 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.1.191 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.6.160 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.12.101 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 6.18.42 - Upgrade
Upgrade
linux/Kernelto a version that resolves this vulnerability.Fixed in 7.1.6 - Upgrade
Upgrade
debian/linuxto a version that resolves this vulnerability.Fixed in 6.12.107-1Fixed in 6.12.115-2Fixed in 7.2.12-1Fixed in 7.2.15-1 - Upgrade
Upgrade
debian/linux-6.12to a version that resolves this vulnerability.Fixed in 6.12.113-1~deb12u1 - Upgrade
Upgrade
azurelinux/kernelto a version that resolves this vulnerability.Fixed in 6.6.161.1-1
Event History
Frequently Asked Questions
What is the severity of CVE-2026-68185?
CVE-2026-68185 is assessed with a risk rating of 22.
How do I fix CVE-2026-68185?
To fix CVE-2026-68185, ensure that jump_label_init() is called before parse_early_param() when configuring your Linux kernel.
What systems are affected by CVE-2026-68185?
CVE-2026-68185 affects systems running the Linux kernel with LoongArch architecture and specific memory profiling configurations.
What are the implications of CVE-2026-68185?
The implications of CVE-2026-68185 include potential instability or unexpected behavior during memory profiling operations.
When was CVE-2026-68185 published?
CVE-2026-68185 was published on August 10, 2026.