Riskcovery

CVE-2026-53282

x86/kexec: Push kjump return address even for non-kjump kexec

State
Published
Severity
Not scored
Published
Jun 26, 2026
Updated
Jun 26, 2026
Reserved
Jun 9, 2026

Read the record on cve.org

Description

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Push kjump return address even for non-kjump kexec

The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec.

After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec).

That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
LinuxLinux
  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to before b0bd7a850e1f082560959707dbf57b0402071646Affected
  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to before 7dba9631faa2ee0785e8c2bf0e3d90a05f26dd8cAffected
  • 2cacf7f23a024ab1fdc603ca6a4f4c8b2de9f64e to before 786a45757dcdf8f2beb9d4a6db605db16c18b2b4Affected
LinuxLinux
  • 6.14Affected
  • before 6.14Not affected
  • 6.18.33 through 6.18.*Not affected
  • 7.0.10 through 7.0.*Not affected
  • 7.1 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.