PT-2026-61141 · Linux · Linux Kernel

CVE-2026-63825 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the Linux kernel where GCC's GCOV instrumentation may merge global branch counters with loop induction variables as an optimization. In the inflate fast() function, the GCOV counter value is loaded multiple times to compute the loop base address, start index, and end bound. Because GCOV counters are global and not per-CPU, concurrent execution on different CPUs can cause the counter to change between these loads. This leads to inconsistent values and out-of-bounds memory writes, resulting in a system crash during IP Payload Compression (IPComp) processing.

Recommendations Add -fprofile-update=prefer-atomic to CFLAGS GCOV in the top-level Makefile, ensuring it is guarded by a try-run compile test to avoid introducing libatomic dependencies on unsupported architectures.

Fix

Related Identifiers

CVE-2026-63825

Affected Products

Linux Kernel

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2026-63825 · Security Note
• https://twitter.com/vuldb/status/2078927696059658442 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2078863856273666085 · Twitter Post
• https://git.kernel.org/stable/c/56cb9b7d96b28a1173a510ab25354b6599ad3a33 · Note
• https://git.kernel.org/stable/c/49d893b9cbcfc5802a32e53a64c6c6956670d65b · Note
• https://git.kernel.org/stable/c/5b959c1dbb4522b9e3ac4e26ad638b8784869841 · Note