CVE-2023-54146
Estado: AplazadaSin puntuar—
In the Linux kernel, the following vulnerability has been resolved:
x86/kexec: Fix double-free of elf header buffer
After
freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free.
Drop the superfluous vfree() call at the error path of crash_load_segments().
Detalles técnicos trazas, registros y código del informe original
b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"),CVSS
NVD no ha asignado puntuación CVSS a esta CVE (habitual desde el cambio de política de abril de 2026).
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.20%
- Percentil entre todas las CVEs puntuadas: 9
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
⚠ Inferidas por IA a partir de la descripción — NVD aún no ha analizado esta CVE; no son CPE verificados.
Referencias
- https://git.kernel.org/stable/c/4c71a552b97fb4f46eb300224434fe56fcf4f254
- https://git.kernel.org/stable/c/554a880a1fff46dd5a355dec21cd77d542a0ddf2
- https://git.kernel.org/stable/c/5bd3c7abeb69fb4133418b846a1c6dc11313d6f0
- https://git.kernel.org/stable/c/d00dd2f2645dca04cf399d8fc692f3f69b6dd996
- https://git.kernel.org/stable/c/fbdbf8ac333d3d47c0d9ea81d7d445654431d100
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-54146",
"cveTags": [],
"metrics": {},
"affected": [
{
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67",
"affectedData": [
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "23cf39dccf7653650701a6f39b119e9116a27f1a",
"lessThan": "4c71a552b97fb4f46eb300224434fe56fcf4f254",
"versionType": "git"
},
{
"status": "affected",
"version": "8765a423a87d74ef24ea02b43b2728fe4039f248",
"lessThan": "554a880a1fff46dd5a355dec21cd77d542a0ddf2",
"versionType": "git"
},
{
"status": "affected",
"version": "b3e34a47f98974d0844444c5121aaff123004e57",
"lessThan": "fbdbf8ac333d3d47c0d9ea81d7d445654431d100",
"versionType": "git"
},
{
"status": "affected",
"version": "b3e34a47f98974d0844444c5121aaff123004e57",
"lessThan": "5bd3c7abeb69fb4133418b846a1c6dc11313d6f0",
"versionType": "git"
},
{
"status": "affected",
"version": "b3e34a47f98974d0844444c5121aaff123004e57",
"lessThan": "d00dd2f2645dca04cf399d8fc692f3f69b6dd996",
"versionType": "git"
},
{
"status": "affected",
"version": "115ee42a4c2f26ba2b4ace2668a3f004621f6833",
"versionType": "git"
},
{
"status": "affected",
"version": "f675e3a9189d84a9324ab45b0cb19906c2bc8fcb",
"versionType": "git"
},
{
"status": "affected",
"version": "5.15.46",
"lessThan": "5.15.87",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.17.14",
"lessThan": "5.18",
"versionType": "semver"
},
{
"status": "affected",
"version": "5.18.3",
"lessThan": "5.19",
"versionType": "semver"
}
],
"programFiles": [
"arch/x86/kernel/crash.c"
],
"defaultStatus": "unaffected"
},
{
"repo": "https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git",
"vendor": "Linux",
"product": "Linux",
"versions": [
{
"status": "affected",
"version": "5.19"
},
{
"status": "unaffected",
"version": "0",
"lessThan": "5.19",
"versionType": "semver"
},
{
"status": "unaffected",
"version": "5.15.87",
"versionType": "semver",
"lessThanOrEqual": "5.15.*"
},
{
"status": "unaffected",
"version": "6.0.19",
"versionType": "semver",
"lessThanOrEqual": "6.0.*"
},
{
"status": "unaffected",
"version": "6.1.5",
"versionType": "semver",
"lessThanOrEqual": "6.1.*"
},
{
"status": "unaffected",
"version": "6.2",
"versionType": "original_commit_for_fix",
"lessThanOrEqual": "*"
}
],
"programFiles": [
"arch/x86/kernel/crash.c"
],
"defaultStatus": "affected"
}
]
}
],
"published": "2025-12-24T13:16:16.607",
"references": [
{
"url": "https://git.kernel.org/stable/c/4c71a552b97fb4f46eb300224434fe56fcf4f254",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/554a880a1fff46dd5a355dec21cd77d542a0ddf2",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/5bd3c7abeb69fb4133418b846a1c6dc11313d6f0",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/d00dd2f2645dca04cf399d8fc692f3f69b6dd996",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
},
{
"url": "https://git.kernel.org/stable/c/fbdbf8ac333d3d47c0d9ea81d7d445654431d100",
"source": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}
],
"vulnStatus": "Deferred",
"descriptions": [
{
"lang": "en",
"value": "In the Linux kernel, the following vulnerability has been resolved:\n\nx86/kexec: Fix double-free of elf header buffer\n\nAfter\n\n b3e34a47f989 (\"x86/kexec: fix memory leak of elf header buffer\"),\n\nfreeing image->elf_headers in the error path of crash_load_segments()\nis not needed because kimage_file_post_load_cleanup() will take\ncare of that later. And not clearing it could result in a double-free.\n\nDrop the superfluous vfree() call at the error path of\ncrash_load_segments()."
}
],
"lastModified": "2026-06-17T06:46:53.167",
"sourceIdentifier": "416baaa9-dc9f-4396-8d5f-8c081fb06d67"
}