CVE-2026-53282 Details
Description
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec. After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec). That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.
A vulnerability in the Linux kernel's handling of kexec operations has been addressed. The issue arose because the purgatory code included with kexec-tools improperly searched for a return address for a 'kjump' operation, even when one was not being used. This misalignment could lead to a fault, although recent exception-handling improvements in kexec have mitigated this issue. The original problem was corrected for 'kjump' operations, but the non-'kjump' path was left without the necessary return address, causing purgatory to crash when it tried to access it. The latest fix restores the return address in the non-'kjump' path, ensuring compatibility with the purgatory code.
Users can update to the latest version of the Linux kernel, where this vulnerability has been fixed. Instructions for downloading the patched kernel can be found on the official Linux kernel website.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://git.kernel.org/stable/c/786a45757dcdf8f2beb9d4a6db605db16c18b2b4 | kernel.org | Patch |
| https://git.kernel.org/stable/c/7dba9631faa2ee0785e8c2bf0e3d90a05f26dd8c | kernel.org | Patch |
| https://git.kernel.org/stable/c/b0bd7a850e1f082560959707dbf57b0402071646 | kernel.org | Patch |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| NVD-CWE-noinfo | Insufficient Information to Classify Weakness | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| linux linux kernel | >= 6.14, < 6.18.33 >= 6.19, < 7.0.10 7.1 rc1 7.1 rc2 7.1 rc3 |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 8, 2026 | Initial Analysis | [email protected] |
| Jun 26, 2026 | New CVE Received | kernel.org |