PT-2026-38982
CVE-2026-43331
·
Published
2026-05-08
·
Updated
2026-10-17
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Linux kernel (affected versions not specified)
Description
In the x86 architecture, the
load segments() function modifies segment registers, which invalidates the GS base used by KCOV for per-cpu data. When CONFIG KCOV is enabled, any subsequent instrumented C code call, such as native gdt invalidate(), causes the kernel to crash in an endless loop. This issue occurs during kexec operations on a KCOV-instrumented kernel, specifically in scenarios like enabling crash dump collection in syzkaller where both CONFIG KEXEC and CONFIG KCOV are enabled simultaneously.Recommendations
Disable KCOV instrumentation for the
machine kexec 64.c and physaddr.c files. Found an issue in the description? Have something to add? Feel free to write us 👾