{"id":3379,"date":"2026-09-04T04:59:40","date_gmt":"2026-09-03T20:59:40","guid":{"rendered":"https:\/\/www.54iter.cn\/?p=3379"},"modified":"2026-09-04T04:59:40","modified_gmt":"2026-09-03T20:59:40","slug":"cve-2026-80727","status":"publish","type":"vuln","link":"https:\/\/www.54iter.cn\/?vuln=cve-2026-80727","title":{"rendered":"CVE-2026-80727 &#8211; In the Linux kernel, the following vulnerability has been resolved:\n\nx86\/mce: Set up the p"},"content":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>x86\/mce: Set up the polling timer before CMCI discovery<\/p>\n<p>I hit the following on one of my machines:<\/p>\n<p>  mce: CPU0 BANK15 CMCI inherited storm<br \/>\n  &#8212;&#8212;&#8212;&#8212;[ cut here ]&#8212;&#8212;&#8212;&#8212;<br \/>\n  ODEBUG: assert_init not available (active state 0) object: (____ptrval____) object type: timer_list hint: 0x0<br \/>\n  WARNING: lib\/debugobjects.c:632 at debug_object_assert_init+0x178\/0x230, CPU#0: swapper\/0\/0<br \/>\n  CPU: 0 UID: 0 PID: 0 Comm: swapper\/0 Not tainted 7.2.0-rc5 #3 PREEMPTLAZY<br \/>\n  RIP: 0010:debug_object_assert_init+0x18f\/0x230<br \/>\n  Call Trace:<\/p>\n<p>   __mod_timer<br \/>\n   mce_timer_kick<br \/>\n   cmci_discover<br \/>\n   intel_init_cmci<br \/>\n   mce_intel_feature_init<br \/>\n   mcheck_cpu_init<br \/>\n   identify_cpu<br \/>\n   identify_boot_cpu<br \/>\n   arch_cpu_finalize_init<br \/>\n   start_kernel<\/p>\n<p>A second splat follows right after, from timer_setup() finding that same<br \/>\ntimer already queued:<\/p>\n<p>  ODEBUG: init active (active state 0) object: (____ptrval____) object type: timer_list hint: stub_timer+0x0\/0x10<\/p>\n<p>This is happening because CMCI storm detection is trying to modify the timer<br \/>\nbefore latter was properly set up.<\/p>\n<p>Set up the timer first. __mcheck_cpu_setup_timer() only calls timer_setup(),<br \/>\nand depends on neither the generic nor the vendor init.<\/p>\n<p>  [ bp: Massage commit message. ]<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the Linux kernel, the following vulnerability has been resolved:<\/p>\n<p>x86\/mce: Set up the polling timer before CMCI discovery<\/p>\n<p>I hit the following on one of my machines:<\/p>\n<p>  mce: CPU0 BANK15 CMCI inheri<\/p>\n","protected":false},"template":"","meta":[],"categories":[],"tags":[],"class_list":["post-3379","vuln","type-vuln","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln\/3379","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/vuln"}],"about":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=\/wp\/v2\/types\/vuln"}],"wp:attachment":[{"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3379"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3379"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.54iter.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3379"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}