Medium severity5.5NVD Advisory· Published Jun 26, 2026· Updated Jul 8, 2026
CVE-2026-53282
CVE-2026-53282
Description
In the Linux kernel, the following vulnerability has been resolved:
x86/kexec: Push kjump return address even for non-kjump kexec
The version of purgatory code shipped by kexec-tools attempts to look above the top of its stack to find a return address for a kjump, even in a non-kjump kexec.
After the commit in Fixes: the word above the stack might not be there, leading to a fault (which is at least now caught by my exception-handling code in kexec).
That commit fixed things for the actual kjump path, but no longer "gratuitously" pushes the unused return address to the stack in the non-kjump path. Put that *back* in the non-kjump path, to prevent purgatory from crashing when trying to access it.
Affected products
7Patches
Vulnerability mechanics
References
3News mentions
1- Linux Kernel: 25 Vulnerabilities Affecting Networking, Graphics, and Memory Management Disclosed TogetherVypr Intelligence · Jun 27, 2026