CVE-2023-54146

Source
https://cve.org/CVERecord?id=CVE-2023-54146
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54146.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-54146
Downstream
BELL (1)
CLSA (1)
DEBIAN (1)
RHSA (1)
SUSE (5)
UBUNTU (1)
Related
Published
2025-12-24T13:06:58Z
Modified
2026-10-08T02:48:35Z
Summary
x86/kexec: Fix double-free of elf header buffer
Details

In the Linux kernel, the following vulnerability has been resolved:

x86/kexec: Fix double-free of elf header buffer

After

b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"),

freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free.

Drop the superfluous vfree() call at the error path of crash_load_segments().

Database specific
{
    "cna_assigner":  "Linux",
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54146.json"
}
References

Affected packages

Git / git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
23cf39dccf7653650701a6f39b119e9116a27f1a
Fixed
4c71a552b97fb4f46eb300224434fe56fcf4f254
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
8765a423a87d74ef24ea02b43b2728fe4039f248
Fixed
554a880a1fff46dd5a355dec21cd77d542a0ddf2
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
b3e34a47f98974d0844444c5121aaff123004e57
Fixed
fbdbf8ac333d3d47c0d9ea81d7d445654431d100
Fixed
5bd3c7abeb69fb4133418b846a1c6dc11313d6f0
Fixed
d00dd2f2645dca04cf399d8fc692f3f69b6dd996
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.15.46
Fixed
5.15.87
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.17.14
Fixed
5.18
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
5.18.3
Fixed
5.19
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
115ee42a4c2f26ba2b4ace2668a3f004621f6833
Type
GIT
Repo
https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git
Events
Introduced
f675e3a9189d84a9324ab45b0cb19906c2bc8fcb

Affected versions

v5.*
v5.15.46
v5.15.47
v5.15.48
v5.15.49
v5.15.50
v5.15.51
v5.15.52
v5.15.53
v5.15.54
v5.15.55
v5.15.56
v5.15.57
v5.15.58
v5.15.59
v5.15.60
v5.15.61
v5.15.62
v5.15.63
v5.15.64
v5.15.65
v5.15.66
v5.15.67
v5.15.68
v5.15.69
v5.15.70
v5.15.71
v5.15.72
v5.15.73
v5.15.74
v5.15.75
v5.15.76
v5.15.77
v5.15.78
v5.15.79
v5.15.80
v5.15.81
v5.15.82
v5.15.83
v5.15.84
v5.15.85
v5.15.86
v5.17.14
v5.17.15
v5.18.10
v5.18.11
v5.18.12
v5.18.13
v5.18.14
v5.18.15
v5.18.16
v5.18.17
v5.18.18
v5.18.19
v5.18.3
v5.18.4
v5.18.5
v5.18.6
v5.18.7
v5.18.8
v5.18.9

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54146.json"

Linux / Kernel

Package

Name
Kernel

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
5.15.87
Type
ECOSYSTEM
Events
Introduced
5.16.0
Fixed
6.0.19
Type
ECOSYSTEM
Events
Introduced
5.19.0
Fixed
6.1.5

Database specific

source
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-54146.json"