CVE-2026-99250
Received Received - Intake

Kernel Boot Hang Fixed with Delayed Printk Kthread Startup

Vulnerability report for CVE-2026-99250, including description, CVSS score, EPSS score, affected products, exploitability, helpful resources, and attack-flow context.

Publication date: 2026-11-03

Last updated on: 2026-11-03

Assigner: kernel.org

Description

In the Linux kernel, the following vulnerability has been resolved: printk: Postpone kthread startup There have been various bug reports related to SMP systems hanging on boot. The reports vary but seem to have some overlap with regard to missed IPI's during SMP setup. The reports also show that reverting NBCON console usage allows the bugs to disappear. The NBCON kthreads for console printing are started very early during boot using early_initcall(). Since these kthreads are asynchronously enabling/disabling interrupts during early boot, they may be interfering with early SMP setup on some hardware platforms. Starting the console printing kthreads later has shown to avoid the hanging on systems that could previously reproduce the issue. Postpone kthread starting until after all arch initcalls have completed.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-11-03
Last Modified
2026-11-03
Generated
2026-11-03
AI Q&A
2026-11-03
EPSS Evaluated
N/A
NVD
EUVD

Affected Vendors & Products

Showing 5 associated CPEs
Vendor Product Version / Range
Linux Linux 76f258bf3f2aae570209319944703a92ac64e29e
Linux Linux 76f258bf3f2aae570209319944703a92ac64e29e
Linux Linux 76f258bf3f2aae570209319944703a92ac64e29e
Linux Linux 76f258bf3f2aae570209319944703a92ac64e29e
Linux Linux 6.12

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability in the Linux kernel involves a timing issue where kthreads for console printing start too early during boot. These kthreads interfere with early SMP setup by asynchronously enabling or disabling interrupts, potentially causing systems to hang on boot. The fix delays starting these kthreads until after all architecture initialization is complete.

Detection Guidance

This vulnerability manifests as system hangs during boot on SMP systems due to early kthread interference. Detection involves checking for boot hangs or missed IPIs during SMP setup. Monitor system logs for boot delays or failures, particularly on multi-core systems.

Impact Analysis

If you use Linux on SMP systems, this vulnerability could cause your system to hang during boot. It may prevent the operating system from starting properly, leading to unbootable systems or requiring manual intervention to recover.

Mitigation Strategies

Apply the Linux kernel patch that postpones kthread startup until after arch initcalls complete. Update to a kernel version containing this fix. If immediate patching is not possible, disable NBCON console usage as a temporary workaround.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-99250. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart

Security Radar

News mentioning this vulnerability
Loading related security news...