x86/kexec: Fix double-free of elf header buffer (Linux Linux)
At a glance
- Source
- NVD
- EPSS
- EPSS 0.20 % · percentile 10 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- Linux
- NVD status
- Deferred
Description
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free. Drop the superfluous vfree() call at the error path of crash_load_segments().
References
- https://git.kernel.org/stable/c/4c71a552b97fb4f46eb300224434fe56fcf4f254
- https://git.kernel.org/stable/c/554a880a1fff46dd5a355dec21cd77d542a0ddf2
- https://git.kernel.org/stable/c/fbdbf8ac333d3d47c0d9ea81d7d445654431d100
- https://git.kernel.org/stable/c/5bd3c7abeb69fb4133418b846a1c6dc11313d6f0
- https://git.kernel.org/stable/c/d00dd2f2645dca04cf399d8fc692f3f69b6dd996
European references
- ENISA EUVD · EUVD-2023-60299
- GCVE · GCVE-0-2023-54146
CERT-FR advisories
- CERTFR-2026-AVI-0225 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0170 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
- CERTFR-2026-AVI-0108 — Multiples vulnérabilités dans le noyau Linux de SUSE · cert.ssi.gouv.fr
Affected products
| Product | Versions |
|---|---|
| Linux · Linux | affected 23cf39dccf7653650701a6f39b119e9116a27f1a < 4c71a552b97fb4f46eb300224434fe56fcf4f254 ; affected 8765a423a87d74ef24ea02b43b2728fe4039f248 < 554a880a1fff46dd5a355dec21cd77d542a0ddf2 ; affected b3e34a47f98974d0844444c5121aaff123004e57 < fbdbf8ac333d3d47c0d9ea81d7d445654431d100 ; affected b3e34a47f98974d0844444c5121aaff123004e57 < 5bd3c7abeb69fb4133418b846a1c6dc11313d6f0 ; affected b3e34a47f98974d0844444c5121aaff123004e57 < d00dd2f2645dca04cf399d8fc692f3f69b6dd996 ; affected 115ee42a4c2f26ba2b4ace2668a3f004621f6833 |
| Linux · Linux | affected 5.19 ; unaffected 0 < 5.19 ; unaffected 5.15.87 ≤ 5.15.* ; unaffected 6.0.19 ≤ 6.0.* ; unaffected 6.1.5 ≤ 6.1.* ; unaffected 6.2 ≤ * |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |