AUGUST 24, 2026
Live Feed
Back to database
Case File

CVE-2026-53282

MEDIUM · CVSS 5.5 EPSS 0.12%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2026-06-26 · Last synced 2026-08-04

CyberRota Analysis

This is a medium severity vulnerability with a CVSS score of 5.5. It affects Linux.

CVE
CVE-2026-53282
Severity
MEDIUM
CVSS
5.5
EPSS
0.12%
Linux

Original NVD Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Push kjump return address even for non-kjump kexec The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec. After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec). That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.

Related CVEs

Other vulnerabilities affecting the same vendor(s)