Baitaphish
Security intelligence
SearchLatest briefing
CVE Explorer

CVE-2026-43289

In the Linux kernel, the following vulnerability has been resolved: kexec: derive purgatory entry from symbol kexec_load_purgatory() derives image->start by locating e_entry inside an SHF_EXECINSTR section. If the purgatory object contains multiple executable sections with overlapping sh_addr, the entrypoint check can match more than once and trigger a WARN. Derive the entry section from the purgatory_start symbol when present and compute image->start from its final placement. Keep the exis
Lifecycle PUBLISHED1 preserved revisionFact urn:baitaphish:canonical-cve-fact-revision:v2:845fe818d678412722111b47659405a0522c2aaa8d6121d7e8d62d0ddeb7622b
Known exploited
Not asserted
Disputed
No
Stale source
No
Conflicts
1

Preserved source conflicts

No provider value was silently selected as the winner.

affected · 2 assertions

{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/kexec_file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrE…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/affected/1

{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/kexec_file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"027797595a108726f4a0a45d225f603b0ffbd22b","status":"affected","version":"f368aed4827bd4276c0e3664fb2cb815a8d7caf3","versionType":"git"},{"lessThan":"1737d37ae1d2814e6cf0a1af87af3d41f0812b95","status":"affected","version":"d38e051ec6fd8650b139d9bc4b0b8b261953b263","versionType":"git"},{"lessThan":"f736032c638a33a243e9126e617788f763d648f9","status":"affected","version":"013027918a4efa807409fcb356…

  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/affected/0

Affected products and versions

2 source assertions
{"defaultStatus":"affected","product":"Linux","programFiles":["kernel/kexec_file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"status":"affected","version":"6.4"},{"lessThan":"6.4","status":"unaffected","version":"0","versionType":"semver"},{"lessThanOrEqual":"5.10.*","status":"unaffected","version":"5.10.252","versionType":"semver"},{"lessThanOrEqual":"5.15.*","status":"unaffected","version":"5.15.202","versionType":"semver"},{"lessThanOrEqual":"6.1.*","status":"unaffected","version":"6.1.165","versionType":"semver"},{"lessThanOrE…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/affected/1
{"defaultStatus":"unaffected","product":"Linux","programFiles":["kernel/kexec_file.c"],"repo":"https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git","vendor":"Linux","versions":[{"lessThan":"027797595a108726f4a0a45d225f603b0ffbd22b","status":"affected","version":"f368aed4827bd4276c0e3664fb2cb815a8d7caf3","versionType":"git"},{"lessThan":"1737d37ae1d2814e6cf0a1af87af3d41f0812b95","status":"affected","version":"d38e051ec6fd8650b139d9bc4b0b8b261953b263","versionType":"git"},{"lessThan":"f736032c638a33a243e9126e617788f763d648f9","status":"affected","version":"013027918a4efa807409fcb356…
  • cve_program_cvelist_v5affected
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/affected/0

Source references

8 source assertions
{"url":"https://git.kernel.org/stable/c/027797595a108726f4a0a45d225f603b0ffbd22b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/0
{"url":"https://git.kernel.org/stable/c/1737d37ae1d2814e6cf0a1af87af3d41f0812b95"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/1
{"url":"https://git.kernel.org/stable/c/36eb314184a0ae74dd42914b47d2b9fc43be8034"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/5
{"url":"https://git.kernel.org/stable/c/480e1d5c64bb14441f79f2eb9421d5e26f91ea3d"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/7
{"url":"https://git.kernel.org/stable/c/5226570bd252cea2e805a161cb0f75c204c3108a"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/6
{"url":"https://git.kernel.org/stable/c/875355152b33436907c2a6d2ffad1431fa86c62b"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/4
{"url":"https://git.kernel.org/stable/c/cfccd3b8c51bc57a8a6fcb2fd30453afae5bc0d2"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/3
{"url":"https://git.kernel.org/stable/c/f736032c638a33a243e9126e617788f763d648f9"}
  • cve_program_cvelist_v5reference
    urn:baitaphish:normalized-source-record:v2:616d72d5b2ae65b53b1c654a14ba3b08db349891637e005883178f218903b184 · sha256:feb44979ad37588b… · /containers/cna/references/2

Attribution and limitations

  • CVE Program CVEList V5: Reproduce the MITRE copyright designation and CVE license in copies. Source →

Provider severity values are preserved separately. Baitaphish does not convert them into a risk rating, infer affected products, or treat EPSS as observed exploitation.

← Back to CVE Explorer