Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2026-89963

powerpc/kexec_file: Fix null-ptr-def in extra size calculation

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in kexec_extra_fdt_size_ppc64(). On platforms without any reserved memory regions, get_reserved_memory_ranges() can return 0 while leaving 'rmem' unallocated as NULL. Passing it directly leads to a kernel panic when evaluating 'rmem->nr_ranges'. Add a NULL check for 'rmem' to prevent this crash.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linux Linux

Default version status: unaffected

  • 0d3ff067331ef84e7e7f49537d768881042ed5ba to < 11ef1c2a5dbe0bd8c1345f59bab7331d352f02cfaffected
  • 0d3ff067331ef84e7e7f49537d768881042ed5ba to < df45337587db21c502fe5251d3bcc7887428f4fbaffected
  • 0d3ff067331ef84e7e7f49537d768881042ed5ba to < 4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0deaaffected
  • 0d3ff067331ef84e7e7f49537d768881042ed5ba to < 761eda315a6e1fda3e8e2185b28430771fb1ac29affected

Linux Linux

Default version status: affected

  • 6.11affected
  • 0 to < 6.11unaffected
  • 6.12.110 to ≤ 6.12.*unaffected
  • 6.18.51 to ≤ 6.18.*unaffected
  • 7.2.5 to ≤ 7.2.*unaffected
  • 7.3 to ≤ *unaffected

References