CVE-2026-63825
kernel: gcov: use atomic counter updates to fix concurrent access crashes
Loading…
Severity
LowRed Hat Product Security
CVSS
Review impact separately from score.
Published · July 19, 2026
Updated · October 20, 2026
Description
A flaw was found in the Linux kernel. When the GCOV instrumentation, which helps analyze code coverage, processes data concurrently across multiple central processing units (CPUs), it can lead to inconsistent counter values. This inconsistency can cause out-of-bounds memory writes within the inflate_fast() function during IP Payload Compression (IPComp) processing. The primary consequence of this vulnerability is a system crash, resulting in a Denial of Service (DoS).
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CWE-787 · Out-of-bounds Write