Linux Kernel Softlockup Vulnerability in __read_vmcore

Vulnerability

A softlockup vulnerability has been identified in the Linux kernel's __read_vmcore function, particularly during kdump operations. This issue arises in memory-constrained environments, where such softlockups can disrupt critical processes like RCU memory management, causing crash dumps to freeze. Although recent changes have reduced the frequency of these softlockups, they still occur sporadically. The vulnerability stems from the second loop in __read_vmcore, which, despite having more natural sleep points, can still lead to prolonged execution times.

Impact

The softlockup can interfere with RCU memory freeing processes, causing kdump crash dumps to become unresponsive.

Remediation

The vulnerability has been addressed by adding a cond_resched() call to the second loop in __read_vmcore, which is expected to eliminate the softlockup issue.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
9.0
impact
0.6
exploitability
4.0
remediation
0.0
relevance
0.0
threat
3.2
urgency
2.9
incentive
1.7

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.