CVE-2023-54146

x86/kexec: Fix double-free of elf header buffer

N/A

Published: December 24, 2025 at 01:06 PM UTC

Updated: June 17, 2026 at 06:46 AM UTC

1 product affected across 1 vendorLinux Kernel

Using Linux by Linux?

Get instant alerts when new vulnerabilities affect Linux - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 0.2%

Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free. Drop the superfluous vfree() call at the error path of crash_load_segments().

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Linux Kernel · Linux

95%

v ≥ 5.17.14v ≥ 5.18.35.15.46 ≤ v < 5.15.875.17.14 ≤ v < 5.185.18.3 ≤ v < 5.195.19 ≤ v < 6.0.195.19 ≤ v < 6.1.55.19 ≤ v < 6.2115ee42a4c2f26ba2b4ace2668a3f004621f683323cf39dccf7653650701a6f39b119e9116a27f1a5.15.46 5.17.14 5.18.3 5.198765a423a87d74ef24ea02b43b2728fe4039f248b3e34a47f98974d0844444c5121aaff123004e57f675e3a9189d84a9324ab45b0cb19906c2bc8fcb

Vendor states this is fixed in 4c71a552b97fb4f46eb300224434fe56fcf4f254 (fixed)

Vendor states this is fixed in 554a880a1fff46dd5a355dec21cd77d542a0ddf2 (fixed)

Vendor states this is fixed in 5bd3c7abeb69fb4133418b846a1c6dc11313d6f0 (fixed)

Vendor states this is fixed in d00dd2f2645dca04cf399d8fc692f3f69b6dd996 (fixed)

Vendor states this is fixed in fbdbf8ac333d3d47c0d9ea81d7d445654431d100 (fixed)

Vendor states this is fixed in 5.15.87 (unaffected)

Affected range stops below 5.18, so it looks safe — our inference, not a vendor statement

Vendor states this is fixed in 5.19 (unaffected)

Vendor states this is fixed in 6.0.19 (unaffected)

Vendor states this is fixed in 6.1.5 (unaffected)

Vendor states this is fixed in 6.2 (unaffected)