x86/kexec: Push kjump return address even for non-kjump kexec
Published Jun 26, 2026
5.5
MEDIUMCVSS 3.1
EPSS 0.16%
Description
The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec.
After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec).
That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.
Affected products
-
Affected
- ≥ , <
- ≥ , <
- ≥ , <
-
Affected
- 6.14
Unaffected
- ≥ 0, < 6.14
- ≥ 6.18.33, ≤ 6.18.*
- ≥ 7.0.10, ≤ 7.0.*
- 7.1
Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).
- ≥ 6.14 · < 6.18.33
- ≥ 6.19 · < 7.0.10
- 7.1
- 7.1
- 7.1
No data.
Red Hat Enterprise Linux 10
kernel
Not affected
Red Hat Enterprise Linux 6
kernel
Not affected
Red Hat Enterprise Linux 7
kernel
Not affected
Red Hat Enterprise Linux 7
kernel-rt
Not affected
Red Hat Enterprise Linux 8
kernel
Not affected
Red Hat Enterprise Linux 8
kernel-rt
Not affected
Red Hat Enterprise Linux 9
kernel
Not affected
Red Hat Enterprise Linux 9
kernel-rt
Not affected
| Product | Package | State | Advisory |
|---|---|---|---|
| Red Hat Enterprise Linux 10 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 6 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 7 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 8 | kernel-rt | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel | Not affected | n/a |
| Red Hat Enterprise Linux 9 | kernel-rt | Not affected | n/a |
No package ranges for this CVE.
Remediation
No remediation recorded yet.
References (9)
- https://access.redhat.com/security/cve/CVE-2026-53282 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2493774 Issue Tracking
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-39887 Advisory
- https://git.kernel.org/stable/c/786a45757dcdf8f2beb9d4a6db605db16c18b2b4 Patch
- https://git.kernel.org/stable/c/7dba9631faa2ee0785e8c2bf0e3d90a05f26dd8c Patch
- https://git.kernel.org/stable/c/b0bd7a850e1f082560959707dbf57b0402071646 Patch
- https://lore.kernel.org/linux-cve-announce/2026062615-CVE-2026-53282-2ffa@gregkh/T
- https://nvd.nist.gov/vuln/detail/CVE-2026-53282
- https://www.cve.org/CVERecord?id=CVE-2026-53282
Change history (0)
No recorded changes yet.
CVE.org / MITRE
CISA Vulnrichment
No data
GitHub
No data