Impact
In the LoongArch implementation of the Linux kernel, the function that initializes branch prediction keys, jump_label_init(), was executed after early parameter parsing. When both memory‑allocation profiling features are enabled during compilation and a boot parameter disables profiling, the kernel aborts during initialization, preventing the system from booting. This improper ordering is a flaw that leads to a complete denial of service by causing the kernel to fail to start.
Affected Systems
The vulnerability affects the Linux kernel for the LoongArch architecture. Any kernel build that includes CONFIG_MEM_ALLOC_PROFILING=y and CONFIG_MEM_ALLOC_PROFILING_ENABLED_BY_DEFAULT=y, with the jump_label_init() call positioned after parse_early_param(), is susceptible. No specific releases are enumerated, so all kernels containing this ordering prior to the patch are potentially impacted.
Risk and Exploitability
The EPSS score for this vulnerability is <1%; it is also not listed in the CISA KEV catalog. The attack vector is not explicitly described in the input; the likely vector is that an attacker must be able to modify the boot configuration to supply the sysctl.vm.mem_profiling=0 boot parameter, such as by controlling the boot loader or firmware. Based on the description, it is inferred that once this parameter is applied to a vulnerable kernel, boot failure occurs deterministically. The impact is a full denial of service to any affected system that requires booting.
OpenCVE Enrichment
Debian DLA