CVE-2023-54146

x86/kexec: Fix double-free of elf header buffer

State: Published
Severity: Not scored
Published: Dec 24, 2025
Updated: May 23, 2026
Reserved: Dec 24, 2025

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix double-free of elf header buffer

After

b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"),

freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free.

Drop the superfluous vfree() call at the error path of crash_load_segments().

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	23cf39dccf7653650701a6f39b119e9116a27f1a to before 4c71a552b97fb4f46eb300224434fe56fcf4f254Affected 8765a423a87d74ef24ea02b43b2728fe4039f248 to before 554a880a1fff46dd5a355dec21cd77d542a0ddf2Affected b3e34a47f98974d0844444c5121aaff123004e57 to before fbdbf8ac333d3d47c0d9ea81d7d445654431d100Affected b3e34a47f98974d0844444c5121aaff123004e57 to before 5bd3c7abeb69fb4133418b846a1c6dc11313d6f0Affected b3e34a47f98974d0844444c5121aaff123004e57 to before d00dd2f2645dca04cf399d8fc692f3f69b6dd996Affected 115ee42a4c2f26ba2b4ace2668a3f004621f6833Affected f675e3a9189d84a9324ab45b0cb19906c2bc8fcbAffected 5.15.46 to before 5.15.87Affected 5.17.14 to before 5.18Affected 5.18.3 to before 5.19Affected
LinuxLinux	5.19Affected before 5.19Not affected 5.15.87 through 5.15.Not affected 6.0.19 through 6.0.Not affected 6.1.5 through 6.1.*Not affected 6.2 and laterNot affected

Product

Versions

LinuxLinux

23cf39dccf7653650701a6f39b119e9116a27f1a to before 4c71a552b97fb4f46eb300224434fe56fcf4f254Affected
8765a423a87d74ef24ea02b43b2728fe4039f248 to before 554a880a1fff46dd5a355dec21cd77d542a0ddf2Affected
b3e34a47f98974d0844444c5121aaff123004e57 to before fbdbf8ac333d3d47c0d9ea81d7d445654431d100Affected
b3e34a47f98974d0844444c5121aaff123004e57 to before 5bd3c7abeb69fb4133418b846a1c6dc11313d6f0Affected
b3e34a47f98974d0844444c5121aaff123004e57 to before d00dd2f2645dca04cf399d8fc692f3f69b6dd996Affected
115ee42a4c2f26ba2b4ace2668a3f004621f6833Affected
f675e3a9189d84a9324ab45b0cb19906c2bc8fcbAffected
5.15.46 to before 5.15.87Affected
5.17.14 to before 5.18Affected
5.18.3 to before 5.19Affected

LinuxLinux

5.19Affected
before 5.19Not affected
5.15.87 through 5.15.*Not affected
6.0.19 through 6.0.*Not affected
6.1.5 through 6.1.*Not affected
6.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.