CVE-2023-54146
Linux Kernel < 5.15.87, 5.16.0-6.0.19, 5.19.0-6.1.5 - Use-After-Free in kexec Crash Load Segments
Title source: llmDescription
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free. Drop the superfluous vfree() call at the error path of crash_load_segments().
References (5)
Core 5
Core References
Scores
EPSS
0.0017
EPSS Percentile
7.2%
Details
Status
published
Products (19)
linux/Kernel
< 5.15.87linux
linux/Kernel
5.16.0 - 6.0.19linux
linux/Kernel
5.19.0 - 6.1.5linux
Linux/Linux
< 5.19
Linux/Linux
115ee42a4c2f26ba2b4ace2668a3f004621f6833
Linux/Linux
23cf39dccf7653650701a6f39b119e9116a27f1a - 4c71a552b97fb4f46eb300224434fe56fcf4f254
Linux/Linux
5.15.46 - 5.15.87
Linux/Linux
5.15.87 - 5.15.*
Linux/Linux
5.17.14 - 5.18
Linux/Linux
5.18.3 - 5.19
... and 9 more
Published
Dec 24, 2025
Tracked Since
Feb 18, 2026