CVE-2026-43289: kexec: derive purgatory entry from symbol
In the Linux kernel, the following vulnerability has been resolved:
kexec: derive purgatory entry from symbol
kexecloadpurgatory() derives image->start by locating eentry inside an SHFEXECINSTR section. If the purgatory object contains multiple executable sections with overlapping shaddr, the entrypoint check can match more than once and trigger a WARN.
Derive the entry section from the purgatorystart symbol when present and compute image->start from its final placement. Keep the existing eentry fallback for purgatories that do not expose the symbol.
WARNING: kernel/kexecfile.c:1009 at kexecloadpurgatory+0x395/0x3c0, CPU#10: kexec/1784 Call Trace: <TASK> bzImage64load+0x133/0xa00 dosyskexecfileload+0x2b3/0x5c0 dosyscall64+0x81/0x610 entrySYSCALL64afterhwframe+0x76/0x7e
[me@linux.beauty: move helper to avoid forward declaration, per Baoquan]
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2026-43289?
CVE-2026-43289 has a moderate severity rating due to potential exploitation scenarios based on improper handling of the purgatory entry.
How do I fix CVE-2026-43289?
To fix CVE-2026-43289, update to the latest version of the Linux kernel where this vulnerability has been patched.
What are the potential impacts of CVE-2026-43289?
Exploitation of CVE-2026-43289 could lead to unauthorized access or execution of arbitrary code in the affected system.
Is my system affected by CVE-2026-43289?
If you are using a version of the Linux kernel that is prior to the fix for CVE-2026-43289, your system may be at risk.
What components are primarily impacted by CVE-2026-43289?
CVE-2026-43289 primarily impacts the kexec functionality within the Linux kernel.