CVE-2023-54146

Linux Kernel < 5.15.87, 5.16.0-6.0.19, 5.19.0-6.1.5 - Use-After-Free in kexec Crash Load Segments

Title source: llm
STIX 2.1

Description

In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free. Drop the superfluous vfree() call at the error path of crash_load_segments().

Scores

EPSS 0.0017
EPSS Percentile 7.2%

Details

Status published
Products (19)
linux/Kernel < 5.15.87linux
linux/Kernel 5.16.0 - 6.0.19linux
linux/Kernel 5.19.0 - 6.1.5linux
Linux/Linux < 5.19
Linux/Linux 115ee42a4c2f26ba2b4ace2668a3f004621f6833
Linux/Linux 23cf39dccf7653650701a6f39b119e9116a27f1a - 4c71a552b97fb4f46eb300224434fe56fcf4f254
Linux/Linux 5.15.46 - 5.15.87
Linux/Linux 5.15.87 - 5.15.*
Linux/Linux 5.17.14 - 5.18
Linux/Linux 5.18.3 - 5.19
... and 9 more
Published Dec 24, 2025
Tracked Since Feb 18, 2026