CVE-2026-89963

Unknown

Description

In the Linux kernel, the following vulnerability has been resolved: powerpc/kexec_file: Fix null-ptr-def in extra size calculation A static Sashiko AI review identified a potential NULL pointer dereference in kexec_extra_fdt_size_ppc64(). On platforms without any reserved memory regions, get_reserved_memory_ranges() can return 0 while leaving 'rmem' unallocated as NULL. Passing it directly leads to a kernel panic when evaluating 'rmem->nr_ranges'. Add a NULL check for 'rmem' to prevent this crash.

SeverityUnknown
CVSS—
Exploit probability—
ProductLinux
PublishedSep 16, 2026
First seenSep 16, 2026

How to fix

Update
  • Linux Linux11ef1c2a5dbe0bd8c1345f59bab7331d352f02cf, df45337587db21c502fe5251d3bcc7887428f4fb, 4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0dea, 761eda315a6e1fda3e8e2185b28430771fb1ac29 or later

Affected products

ProductAffected versionsFixed in
Linux Linux0d3ff067331ef84e7e7f49537d768881042ed5ba ≤ v < 11ef1c2a5dbe0bd8c1345f59bab7331d352f02cf, 0d3ff067331ef84e7e7f49537d768881042ed5ba ≤ v < df45337587db21c502fe5251d3bcc7887428f4fb, 0d3ff067331ef84e7e7f49537d768881042ed5ba ≤ v < 4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0dea, 0d3ff067331ef84e7e7f49537d768881042ed5ba ≤ v < 761eda315a6e1fda3e8e2185b28430771fb1ac29, 6.1111ef1c2a5dbe0bd8c1345f59bab7331d352f02cf, df45337587db21c502fe5251d3bcc7887428f4fb, 4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0dea, 761eda315a6e1fda3e8e2185b28430771fb1ac29

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.