Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2026-72013— riscv: Prevent NULL pointer dereference in machine_kexec_prepare()

AI Predicted 4.4 Difficulty: Moderate EPSS 0.21% · P11

Affected Version Matrix 21

VendorProductVersion RangeStatus
LinuxLinux4211742f0f9e083188f4f0ada00d6eeeef31b7c7< 606cc45e871e34b80a2f63874f069387a5b44176affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< c462e15497dc40abe369b3be7a2c91ac5d1be6f9affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< b5f92cc4e24a298bf390b0b189a4b888c0900161affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< 6ad6954492697681ebcfc1beb0eb384406cd4b65affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< eadd0c2c76aee6a738f17f251434c77db3c606c8affected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< d5b2752a17efc165793ae38f2c24b5ed9c04ffdeaffected
b7fb4d78a6ade6026d9e5cf438c2a46ab962e032< 81bbcff0c053c4f5c711c31a9b72fc492bd96c3faffected
3ca8a07f141fd8eec347a82bdfa4b94164f2bb97affected
… +13 more rows
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2026-72013

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
riscv: Prevent NULL pointer dereference in machine_kexec_prepare()
Source: CVE Program / CVE List V5
Vulnerability Description
In the Linux kernel, the following vulnerability has been resolved: riscv: Prevent NULL pointer dereference in machine_kexec_prepare() A NULL pointer dereference issue is noticed in riscv's machine_kexec_prepare(), where image->segment[i].buf might be NULL and copied unchecked. The NULL buf comes from ima_add_kexec_buffer(), where kbuf is added by kexec_add_buffer(), but kbuf.buffer is NULL, then it is copied without a check in machine_kexec_prepare(): kexec_file_load -> kimage_file_alloc_init() -> kimage_file_prepare_segments() -> ima_add_kexec_buffer() -> kexec_add_buffer() -> machine_kexec_prepare() -> memcpy() Address this by adding a check before the data copy attempt.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

VendorProductAffected VersionsCPESubscribe
LinuxLinux 4211742f0f9e083188f4f0ada00d6eeeef31b7c7 ~ 606cc45e871e34b80a2f63874f069387a5b44176 -
LinuxLinux 5.19 -

II. Public POCs for CVE-2026-72013

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-72013

请登录查看更多情报信息。

Patches & Fixes for CVE-2026-72013 (7)

Same Patch Batch · Linux · 2026-08-15 · 848 CVEs total

CVE-2026-72257ASoC: qcom: q6apm: fix NULL pointer dereference in graph_callback
CVE-2026-72269fbdev: uvesafb: fix potential memory leak in uvesafb_probe()
CVE-2026-72268fbdev: tdfxfb: fix potential memory leak in tdfxfb_probe()
CVE-2026-72267fbdev: carminefb: fix potential memory leak in alloc_carmine_fb()
CVE-2026-72266fbdev: vesafb: fix memory leak in vesafb_probe()
CVE-2026-72265fbdev: nvidia: fix potential memory leak in nvidiafb_probe()
CVE-2026-72264fbdev: tridentfb: fix potential memory leak in trident_pci_probe()
CVE-2026-72262ASoC: SOF: ipc3-control: Fix heap overflow in bytes_ext put/get
CVE-2026-72263ASoC: SOF: topology: fix memory leak in snd_sof_load_topology
CVE-2026-72261ASoC: SOF: ipc3-control: Validate size in snd_sof_update_control
CVE-2026-72260ASoC: mediatek: mt8192: Check runtime resume during probe
CVE-2026-72259ASoC: mediatek: mt8192: Release reserved memory on cleanup
CVE-2026-72258ASoC: mediatek: mt8183: Release reserved memory on cleanup
CVE-2026-72256netfilter: xt_cluster: reject template conntracks in hash match
CVE-2026-72246netfilter: flowtable: use correct direction to set up tunnel route
CVE-2026-72249netfilter: flowtable: use dst in this direction when pushing IPIP header
CVE-2026-72248netfilter: flowtable: support IPIP tunnel with direct xmit
CVE-2026-72247netfilter: nf_conncount: fix zone comparison in tuple dedup
CVE-2026-72250netfilter: nf_conntrack_reasm: guard mac_header adjustment after IPv6 defrag
CVE-2026-72245gpu: host1x: Fix device reference leak in host1x_device_parse_dt() error path

Showing top 20 of 848 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: Linux
Same vendor: Linux

V. Comments for CVE-2026-72013

No comments yet

Leave a comment