CVE-2026-72013

riscv: Prevent NULL pointer dereference in machine_kexec_prepare()

State: Published
Severity: Not scored
Published: Aug 15, 2026
Updated: Aug 17, 2026
Reserved: Aug 9, 2026

Description

In the Linux kernel, the following vulnerability has been resolved:

riscv: Prevent NULL pointer dereference in machine_kexec_prepare()

A NULL pointer dereference issue is noticed in riscv's machine_kexec_prepare(), where image->segment[i].buf might be NULL and copied unchecked.

The NULL buf comes from ima_add_kexec_buffer(), where kbuf is added by kexec_add_buffer(), but kbuf.buffer is NULL, then it is copied without a check in machine_kexec_prepare():

kexec_file_load -> kimage_file_alloc_init() -> kimage_file_prepare_segments() -> ima_add_kexec_buffer() -> kexec_add_buffer() -> machine_kexec_prepare() -> memcpy()

Address this by adding a check before the data copy attempt.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
LinuxLinux	4211742f0f9e083188f4f0ada00d6eeeef31b7c7 to before 606cc45e871e34b80a2f63874f069387a5b44176Affected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before c462e15497dc40abe369b3be7a2c91ac5d1be6f9Affected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before b5f92cc4e24a298bf390b0b189a4b888c0900161Affected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before 6ad6954492697681ebcfc1beb0eb384406cd4b65Affected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before eadd0c2c76aee6a738f17f251434c77db3c606c8Affected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before d5b2752a17efc165793ae38f2c24b5ed9c04ffdeAffected b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before 81bbcff0c053c4f5c711c31a9b72fc492bd96c3fAffected 3ca8a07f141fd8eec347a82bdfa4b94164f2bb97Affected 3ba83e46b591381e718007f55c9f831fd0cd7ee8Affected 5.15.47 to before 5.15.212Affected 5.17.15 to before 5.18Affected 5.18.4 to before 5.19Affected
LinuxLinux	5.19Affected before 5.19Not affected 5.15.212 through 5.15.Not affected 6.1.178 through 6.1.Not affected 6.6.145 through 6.6.Not affected 6.12.97 through 6.12.Not affected 6.18.40 through 6.18.Not affected 7.1.5 through 7.1.Not affected 7.2 and laterNot affected

Product

Versions

LinuxLinux

4211742f0f9e083188f4f0ada00d6eeeef31b7c7 to before 606cc45e871e34b80a2f63874f069387a5b44176Affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before c462e15497dc40abe369b3be7a2c91ac5d1be6f9Affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before b5f92cc4e24a298bf390b0b189a4b888c0900161Affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before 6ad6954492697681ebcfc1beb0eb384406cd4b65Affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before eadd0c2c76aee6a738f17f251434c77db3c606c8Affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before d5b2752a17efc165793ae38f2c24b5ed9c04ffdeAffected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 to before 81bbcff0c053c4f5c711c31a9b72fc492bd96c3fAffected
3ca8a07f141fd8eec347a82bdfa4b94164f2bb97Affected
3ba83e46b591381e718007f55c9f831fd0cd7ee8Affected
5.15.47 to before 5.15.212Affected
5.17.15 to before 5.18Affected
5.18.4 to before 5.19Affected

LinuxLinux

5.19Affected
before 5.19Not affected
5.15.212 through 5.15.*Not affected
6.1.178 through 6.1.*Not affected
6.6.145 through 6.6.*Not affected
6.12.97 through 6.12.*Not affected
6.18.40 through 6.18.*Not affected
7.1.5 through 7.1.*Not affected
7.2 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.