CVE-2026-43289
MediumSummary
A vulnerability has been identified in the Linux kernel related to the kexec_load_purgatory() function, which derives the start image from the SHF_EXECINSTR section. The issue occurs when the purgatory object contains multiple executable sections with overlapping addresses.
Risk Assessment
This vulnerability may lead to unpredictable system behavior, posing risks to the stability and security of the operating system.
Recommendation
It is recommended to update the Linux kernel to the latest version where this vulnerability has been patched.
Original NVD description (English source)
In the Linux kernel, the following vulnerability has been resolved: kexec: derive purgatory entry from symbol kexec_load_purgatory() derives image->start by locating e_entry inside an SHF_EXECINSTR section. If the purgatory object contains multiple executable sections with overlapping sh_addr, th