A race condition in the Linux kernel’s kcov remote tracing code on PREEMPT_RT builds corrupts temporary state stored as per‑CPU data. Nested softirq preemption can overwrite the per‑CPU area, destroying the original task’s KCOV state, leading to out‑of‑bounds memory accesses, memory leaks, and kernel crashes. The vulnerability represents a serious flaw that can cause denial of service by crashing the kernel and may affect all processes running on the affected system.

All Linux kernel releases compiled with PREEMPT_RT are affected. No specific kernel version ranges are listed in the CVE data, but any build that implements the kcov module without the recent fix is susceptible.

The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog. The CVSS score is not provided. Exploitation requires the attacker to trigger a specific preemption scenario involving nested softirqs, which is not trivial but could be achieved by an attacker with control over kernel or a privileged user. The vulnerability can lead to a kernel crash, representing a high‑impact denial of service risk for affected systems.