PT-2026-38931 · Linux · Linux Kernel

Baoquan · Published 2026-05-08 · Updated 2026-05-22 · CVE-2026-43289

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists in the kexec load purgatory() function where image->start is derived by locating e entry within an SHF EXECINSTR section. If the purgatory object contains multiple executable sections with overlapping sh addr, the entrypoint check may match multiple times, triggering a system warning.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-43289

OESA-2026-2418

Affected Products

Linux Kernel

References · 142

• https://nvd.nist.gov/vuln/detail/CVE-2026-23383 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-40281 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23374 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39812 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-23268 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38499 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37967 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-68283 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-38307 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-37766 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2026-43470 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39894 · Security Note
• https://git.kernel.org/stable/c/027797595a108726f4a0a45d225f603b0ffbd22b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2025-40062 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-39756 · Security Note