In the Linux kernel, the following vulnerability has been resolved:
kexec: derive purgatory entry from symbol
kexec_load_purgatory() derives image->start by locating e_entry inside an SHF_EXECINSTR section. If the purgatory object contains multiple executable sections with overlapping sh_addr, the entrypoint check can match more than once and trigger a WARN.
Derive the entry section from the purgatory_start symbol when present and compute image->start from its final placement. Keep the existing e_entry fallback for purgatories that do not expose the symbol.
WARNING: kernel/kexec_file.c:1009 at kexec_load_purgatory+0x395/0x3c0, CPU#10: kexec/1784 Call Trace: <TASK> bzImage64_load+0x133/0xa00 __do_sys_kexec_file_load+0x2b3/0x5c0 do_syscall_64+0x81/0x610 entry_SYSCALL_64_after_hwframe+0x76/0x7e
[[email protected]: move helper to avoid forward declaration, per Baoquan]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perf-debuginfoUpgrade kernel-headersUpgrade bpftool-debuginfoUpgrade python-perfUpgrade kernelUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-x86_64Upgrade bpftoolUpgrade perf-debuginfoUpgrade kernel-livepatch-5.15.202-141.223Upgrade kernel-toolsUpgrade kernel-livepatch-5.10.252-250.992Upgrade kernel-tools-develUpgrade kernel-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade perf | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade bpftool6.18-debuginfoUpgrade kernel6.18-tools-develUpgrade kernel6.18-debuginfoUpgrade bpftool6.18Upgrade kernel6.18-debuginfo-common-aarch64Upgrade kernel6.18-libbpf-staticUpgrade kernel6.18-libbpfUpgrade kernel6.18-debuginfo-common-x86_64Upgrade kernel6.18-develUpgrade perf6.18Upgrade kernel-livepatch-6.18.16-18.222Upgrade kernel6.18-modules-extra-commonUpgrade python3-perf6.18Upgrade kernel6.18-toolsUpgrade kernel6.18-tools-debuginfoUpgrade kernel6.18Upgrade perf6.18-debuginfoUpgrade kernel6.18-headersUpgrade python3-perf6.18-debuginfoUpgrade kernel6.18-modules-extraUpgrade kernel6.18-libbpf-develUpgrade kernel6.18-libbpf-debuginfo | May 19, 2026 | May 8, 2026 |
| Debian | — | Upgrade linux | May 10, 2026 | May 10, 2026 |
| Redhat_linux | — | No solution exists | Jul 17, 2026 | May 8, 2026 |
| Ubuntu | — | Upgrade linux-image-generic-64k-5.15Upgrade linux-image-virtual-6.8Upgrade linux-image-5.15.0-1117-azure-fdeUpgrade linux-image-6.8.0-1058-nvidia-lowlatencyUpgrade linux-image-6.8.0-134-lowlatencyUpgrade linux-image-xilinx-6.8Upgrade linux-image-generic-lpaeUpgrade linux-image-5.15.0-1106-raspiUpgrade linux-image-gcp-64kUpgrade linux-image-5.15.0-1104-intel-iot-realtimeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-gcp-fips-5.15Upgrade linux-image-6.8.0-1058-nvidia-lowlatency-64kUpgrade linux-image-lowlatency-hwe-20.04Upgrade linux-image-nvidiaUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1032-xilinxUpgrade linux-image-azure-fde-lts-22.04Upgrade linux-image-gcp-fipsUpgrade linux-image-azure-fipsUpgrade linux-image-6.8.0-1058-gke-64kUpgrade linux-image-azure-5.15Upgrade linux-image-azure-fde-lts-24.04Upgrade linux-image-gcp-fips-6.8Upgrade linux-image-oem-22.04bUpgrade linux-image-oracle-64k-6.8Upgrade linux-image-nvidia-tegra-rtUpgrade linux-image-5.15.0-1111-realtimeUpgrade linux-image-gke-64kUpgrade linux-image-nvidia-64kUpgrade linux-image-6.8.0-1029-nvidia-tegra-rtUpgrade linux-image-generic-6.8Upgrade linux-image-6.8.0-1063-gcp-64kUpgrade linux-image-nvidia-lowlatency-5.15Upgrade linux-image-raspi-realtime-6.8Upgrade linux-image-aws-6.8Upgrade linux-image-ibm-lts-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-ibm-classicUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-6.8.0-1057-oracleUpgrade linux-image-6.8.0-1063-azureUpgrade linux-image-realtime-5.15Upgrade linux-image-azure-fdeUpgrade linux-image-ibm-6.8Upgrade linux-image-generic-64k-6.8Upgrade linux-image-gkeopUpgrade linux-image-gkeop-6.8Upgrade linux-image-5.15.0-1112-awsUpgrade linux-image-nvidia-tegra-igx-rt-5.15Upgrade linux-image-raspi-5.15Upgrade linux-image-fipsUpgrade linux-image-5.15.0-1112-gcpUpgrade linux-image-6.8.1-1055-realtimeUpgrade linux-image-nvidia-tegra-rt-5.15Upgrade linux-image-ibmUpgrade linux-image-azure-fips-6.8Upgrade linux-image-generic-hwe-22.04Upgrade linux-image-azure-fde-5.15Upgrade linux-image-gke-6.8Upgrade linux-image-oem-22.04Upgrade linux-image-oracle-lts-24.04Upgrade linux-image-6.8.0-134-genericUpgrade linux-image-nvidia-64k-hwe-22.04Upgrade linux-image-kvm-5.15Upgrade linux-image-lowlatency-6.8Upgrade linux-image-nvidia-lowlatency-6.8Upgrade linux-image-oem-20.04bUpgrade linux-image-oem-20.04cUpgrade linux-image-oem-20.04dUpgrade linux-image-nvidia-5.15Upgrade linux-image-oem-22.04aUpgrade linux-image-raspiUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.15.0-1117-azure-fipsUpgrade linux-image-generic-64kUpgrade linux-image-oracle-64k-lts-24.04Upgrade linux-image-gke-64k-6.8Upgrade linux-image-nvidia-tegra-5.15Upgrade linux-image-realtime-6.8.1Upgrade linux-image-nvidia-tegra-6.8Upgrade linux-image-6.8.0-1058-nvidia-64kUpgrade linux-image-5.15.0-186-genericUpgrade linux-image-6.8.0-1062-azure-fipsUpgrade linux-image-oracle-5.15Upgrade linux-image-raspi-6.8Upgrade linux-image-virtual-hwe-22.04Upgrade linux-image-aws-fips-5.15Upgrade linux-image-lowlatency-64k-hwe-20.04Upgrade linux-image-5.15.0-1064-nvidia-tegraUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1107-nvidia-lowlatencyUpgrade linux-image-genericUpgrade linux-image-gke-5.15Upgrade linux-image-5.15.0-1108-gkeUpgrade linux-image-aws-lts-22.04Upgrade linux-image-aws-64k-lts-24.04Upgrade linux-image-azureUpgrade linux-image-aws-64k-6.8Upgrade linux-image-azure-lts-24.04Upgrade linux-image-5.15.0-186-generic-64kUpgrade linux-image-6.8.0-1060-ibmUpgrade linux-image-6.8.0-1062-azure-fdeUpgrade linux-image-fips-6.8Upgrade linux-image-5.15.0-186-generic-lpaeUpgrade linux-image-nvidia-tegraUpgrade linux-image-oem-22.04cUpgrade linux-image-generic-5.15Upgrade linux-image-gcp-64k-lts-24.04Upgrade linux-image-intel-iot-realtime-5.15Upgrade linux-image-realtimeUpgrade linux-image-5.15.0-1117-azureUpgrade linux-image-gkeop-5.15Upgrade linux-image-oem-20.04Upgrade linux-image-virtualUpgrade linux-image-5.15.0-1107-nvidiaUpgrade linux-image-6.8.0-134-fipsUpgrade linux-image-5.15.0-1106-ibmUpgrade linux-image-5.15.0-1095-gkeopUpgrade linux-image-nvidia-tegra-rt-6.8Upgrade linux-image-laptop-23.10Upgrade linux-image-intelUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.15.0-186-fipsUpgrade linux-image-nvidia-6.8Upgrade linux-image-5.15.0-1112-gcp-fipsUpgrade linux-image-oracle-lts-22.04Upgrade linux-image-nvidia-tegra-igx-5.15Upgrade linux-image-6.8.0-134-generic-64kUpgrade linux-image-azure-fips-5.15Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-6.8.0-1060-awsUpgrade linux-image-nvidia-hwe-22.04Upgrade linux-image-5.15.0-1107-intel-iotgUpgrade linux-image-azure-cvmUpgrade linux-image-6.8.0-136-genericUpgrade linux-image-5.15.0-1109-oracleUpgrade linux-image-5.15.0-1064-nvidia-tegra-rtUpgrade linux-image-5.15.0-1053-nvidia-tegra-igxUpgrade linux-image-kvmUpgrade linux-image-intel-iot-realtimeUpgrade linux-image-raspi-nolpaeUpgrade linux-image-6.8.0-134-lowlatency-64kUpgrade linux-image-5.15.0-184-lowlatencyUpgrade linux-image-intel-iotgUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-5.15.0-1112-aws-fipsUpgrade linux-image-virtual-5.15Upgrade linux-image-oracle-64kUpgrade linux-image-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-5.15Upgrade linux-image-5.15.0-1112-aws-64kUpgrade linux-image-aws-fipsUpgrade linux-image-gcp-5.15Upgrade linux-image-azure-fde-6.8Upgrade linux-image-6.8.0-136-generic-64kUpgrade linux-image-6.8.0-1058-nvidiaUpgrade linux-image-6.8.0-1057-oracle-64kUpgrade linux-image-5.15.0-1075-xilinx-zynqmpUpgrade linux-image-raspi-realtimeUpgrade linux-image-oem-22.04dUpgrade linux-image-ibm-5.15Upgrade linux-image-gkeUpgrade linux-image-azure-6.8Upgrade linux-image-lowlatency-5.15Upgrade linux-image-xilinx-zynqmp-5.15Upgrade linux-image-xilinx-zynqmpUpgrade linux-image-realtime-hwe-22.04Upgrade linux-image-nvidia-lowlatency-64k-6.8Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-24.04Upgrade linux-image-6.8.0-1063-gcp-fipsUpgrade linux-image-6.8.0-1063-gcpUpgrade linux-image-6.8.0-1058-gkeUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-nvidia-tegra-igxUpgrade linux-image-aws-64k-5.15Upgrade linux-image-aws-64kUpgrade linux-image-awsUpgrade linux-image-6.8.0-1060-raspiUpgrade linux-image-6.8.0-1060-aws-fipsUpgrade linux-image-6.8.0-1029-nvidia-tegraUpgrade linux-image-5.15.0-184-lowlatency-64kUpgrade linux-image-5.15.0-1104-kvmUpgrade linux-image-5.15.0-1053-nvidia-tegra-igx-rtUpgrade linux-image-oracle-6.8Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-generic-lpae-5.15Upgrade linux-image-gcp-64k-6.8Upgrade linux-image-gcp-6.8Upgrade linux-image-aws-5.15Upgrade linux-image-6.8.0-1060-aws-64kUpgrade linux-image-xilinxUpgrade linux-image-gcpUpgrade linux-image-oracleUpgrade linux-image-nvidia-tegra-igx-rtUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-intel-iotg-5.15Upgrade linux-image-gcp-lts-22.04Upgrade linux-image-aws-64k-lts-22.04Upgrade linux-image-6.8.0-2049-raspi-realtimeUpgrade linux-image-fips-5.15Upgrade linux-image-6.8.0-1045-gkeopUpgrade linux-image-aws-lts-24.04Upgrade linux-image-aws-fips-6.8 | Jul 2, 2026 | Jul 1, 2026 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 6, 2026 | May 8, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub