CVE-2026-43331

kernel: x86/kexec: Disable KCOV instrumentation after load_segments()

Loading…

Severity

Unknown

Red Hat Product Security

—

CVSS

Review impact separately from score.

Published · May 8, 2026

Updated · June 28, 2026

Description

A flaw was found in the Linux kernel. When Kernel Coverage (KCOV) instrumentation is enabled, a local user performing a kexec operation can trigger an invalid state within the x86/kexec component. This invalid state, related to the GS base that KCOV relies on for per-CPU data, causes the kernel to crash in an endless loop. This vulnerability leads to a Denial of Service (DoS) for the affected system.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CWE not specified