CVE-2026-72013
Description
In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machine_kexec_prepare() A NULL pointer dereference issue is noticed in riscv's machine_kexec_prepare(), where image->segment[i].buf might be NULL and copied unchecked. The NULL buf comes from ima_add_kexec_buffer(), where kbuf is added by kexec_add_buffer(), but kbuf.buffer is NULL, then it is copied without a check in machine_kexec_prepare(): kexec_file_load -> kimage_file_alloc_init() -> kimage_file_prepare_segments() -> ima_add_kexec_buffer() -> kexec_add_buffer() -> machine_kexec_prepare() -> memcpy() Address this by adding a check before the data copy attempt.
How to fix
- Linux Linux606cc45e871e34b80a2f63874f069387a5b44176, c462e15497dc40abe369b3be7a2c91ac5d1be6f9, b5f92cc4e24a298bf390b0b189a4b888c0900161, 6ad6954492697681ebcfc1beb0eb384406cd4b65, eadd0c2c76aee6a738f17f251434c77db3c606c8, d5b2752a17efc165793ae38f2c24b5ed9c04ffde, 81bbcff0c053c4f5c711c31a9b72fc492bd96c3f, 5.15.212, 5.18, 5.19 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Linux Linux | 4211742f0f9e083188f4f0ada00d6eeeef31b7c7 ≤ v < 606cc45e871e34b80a2f63874f069387a5b44176, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < c462e15497dc40abe369b3be7a2c91ac5d1be6f9, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < b5f92cc4e24a298bf390b0b189a4b888c0900161, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < 6ad6954492697681ebcfc1beb0eb384406cd4b65, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < eadd0c2c76aee6a738f17f251434c77db3c606c8, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < d5b2752a17efc165793ae38f2c24b5ed9c04ffde, b7fb4d78a6ade6026d9e5cf438c2a46ab962e032 ≤ v < 81bbcff0c053c4f5c711c31a9b72fc492bd96c3f, 3ca8a07f141fd8eec347a82bdfa4b94164f2bb97, 3ba83e46b591381e718007f55c9f831fd0cd7ee8, 5.15.47 ≤ v < 5.15.212, 5.17.15 ≤ v < 5.18, 5.18.4 ≤ v < 5.19, 5.19 | 606cc45e871e34b80a2f63874f069387a5b44176, c462e15497dc40abe369b3be7a2c91ac5d1be6f9, b5f92cc4e24a298bf390b0b189a4b888c0900161, 6ad6954492697681ebcfc1beb0eb384406cd4b65, eadd0c2c76aee6a738f17f251434c77db3c606c8, d5b2752a17efc165793ae38f2c24b5ed9c04ffde, 81bbcff0c053c4f5c711c31a9b72fc492bd96c3f, 5.15.212, 5.18, 5.19 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.