Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-53282

x86/kexec: Push kjump return address even for non-kjump kexec

Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec. After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec). That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to < b0bd7a850e1f082560959707dbf57b0402071646affected
  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to < 7dba9631faa2ee0785e8c2bf0e3d90a05f26dd8caffected
  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to < 786a45757dcdf8f2beb9d4a6db605db16c18b2b4affected

Linux Linux

Default version status: affected

  • 6.14affected
  • 0 to < 6.14unaffected
  • 6.18.33 to ≤ 6.18.*unaffected
  • 7.0.10 to ≤ 7.0.*unaffected
  • 7.1 to ≤ *unaffected

References