CVE-2026-53282
Gravedad CVSS v3.1:
MEDIA
Tipo:
No Disponible / Otro tipo
Fecha de publicación:
26/06/2026
Última modificación:
08/07/2026
Descripción
*** Pendiente de traducción *** In the Linux kernel, the following vulnerability has been resolved:<br />
<br />
x86/kexec: Push kjump return address even for non-kjump kexec<br />
<br />
The version of purgatory code shipped by kexec-tools attempts to look above<br />
the top of its stack to find a return address for a kjump, even in a non-kjump<br />
kexec.<br />
<br />
After the commit in Fixes: the word above the stack might not be there,<br />
leading to a fault (which is at least now caught by my exception-handling code<br />
in kexec).<br />
<br />
That commit fixed things for the actual kjump path, but no longer<br />
"gratuitously" pushes the unused return address to the stack in the non-kjump<br />
path. Put that *back* in the non-kjump path, to prevent purgatory from<br />
crashing when trying to access it.
Impacto
Puntuación base 3.x
5.50
Gravedad 3.x
MEDIA
Productos y versiones vulnerables
| CPE | Desde | Hasta |
|---|---|---|
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.14 (incluyendo) | 6.18.33 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:*:*:*:*:*:*:*:* | 6.19 (incluyendo) | 7.0.10 (excluyendo) |
| cpe:2.3:o:linux:linux_kernel:7.1:rc1:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc2:*:*:*:*:*:* | ||
| cpe:2.3:o:linux:linux_kernel:7.1:rc3:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página