Vulnerability in the Linux Kernel Affects Kexec Functionality

CVE-2026-53282

What is CVE-2026-53282?

A vulnerability in the Linux kernel related to the kexec functionality has been identified. The issue occurs due to an erroneous handling of the stack during the kexec process. Specifically, the purgatory code included in the kexec-tools attempts to retrieve a return address for a kjump, even in instances where kjump is not being utilized. This flawed approach can lead to a fault when the expected address is absent from the stack, triggering a crash. Recent commits aimed to address this by stopping the unnecessary pushing of the return address in non-kjump scenarios, but it is necessary to reinstate this functionality to avoid purgatory destabilization. Users are advised to update their systems to the latest kernel versions where this issue has been resolved.

References