PT-2026-2876 · Linux+2 · Linux Kernel+2

Published 2025-01-01 · Updated 2026-05-26 · CVE-2025-71115

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A flaw exists in the Linux kernel related to the initialization of the cpu tasks[] array. The issue occurs because the array is not initialized statically, leading to potential crashes when certain init code, such as that used with Kernel Coverage (KCOV) enabled, calls functions like memparse(), which have coverage annotations. These calls can trigger checks within check kcov mode() that fail because the current pointer is NULL. Initializing the cpu tasks[] array statically resolves this crash.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Uninitialized Resource

Weakness Enumeration

CWE-908

Related Identifiers

CVE-2025-71115

ECHO-4BFB-17CE-E2BF

USN-8177-1

USN-8177-2

USN-8183-1

USN-8183-2

USN-8245-1

USN-8257-1

Affected Products

Linuxmint

Linux Kernel

Ubuntu

References · 167

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/71xxx/CVE-2025-71115.json · Exploit
• https://ubuntu.com/security/CVE-2025-68785 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-71115 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71073 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71150 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71157 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68822 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68791 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71066 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71111 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71138 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71116 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68800 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-71113 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-68821 · Vendor Advisory