CVE-2026-68185
Description
In the Linux kernel, the following vulnerability has been resolved: LoongArch: Move jump_label_init() before parse_early_param() When enabling both CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y, then diabling memory profiling by adding the boot parameter 'sysctl.vm.mem_profiling=0' will cause the kernel failed to boot. After analysis, this is because jump_label_init() must be called before parse_early_param(), the early param handlers may modify static keys by static_branch_enable/disable(). Fix this by moving jump_label_init() to before parse_early_param(). The solution is similar to other architectures.
How to fix
- Linux Linux02f993165fdbba98dd6a9ec230a3deda891bb9f2, 1d0b99ef7fcb6cef1df273872059bf854814500e, 4b40e590efb350c54480d7e883f054d3609a94c6, 38b025fcdc45bdf5140a5726a1fbb2e694ea047b, 881e9f3c4e117b100880b1c5de3a0da8e455a78f, ea68d444a658783234a06f05414e41cf93a18fb2 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < 02f993165fdbba98dd6a9ec230a3deda891bb9f2, 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < 1d0b99ef7fcb6cef1df273872059bf854814500e, 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < 4b40e590efb350c54480d7e883f054d3609a94c6, 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < 38b025fcdc45bdf5140a5726a1fbb2e694ea047b, 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < 881e9f3c4e117b100880b1c5de3a0da8e455a78f, 628c3bb40e9a8cefc0a6fde28b7b66bfe46d1dc2 ≤ v < ea68d444a658783234a06f05414e41cf93a18fb2, 5.19 | 02f993165fdbba98dd6a9ec230a3deda891bb9f2, 1d0b99ef7fcb6cef1df273872059bf854814500e, 4b40e590efb350c54480d7e883f054d3609a94c6, 38b025fcdc45bdf5140a5726a1fbb2e694ea047b, 881e9f3c4e117b100880b1c5de3a0da8e455a78f, ea68d444a658783234a06f05414e41cf93a18fb2 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.