PT-2026-61484 · Linux · Linux Kernel

CVE-2026-64167 · Published 2026-07-19 · Updated 2026-07-19

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the kho fill kimage() function unconditionally populates the kimage with KHO metadata for every kexec image type. When a crash kernel is used, it may operate within a small reserved region, causing KHO scratch areas to be located outside this region. This leads to a kernel paging request fault during kho memory init() when the system attempts to perform phys to virt() on the KHO FDT address. This occurs because kho fill kimage() lacked the guard present in kho locate mem hole() to skip KHO logic for KEXEC TYPE CRASH images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2026-64167

Affected Products

Linux Kernel

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2026-64167 · Security Note
• https://git.kernel.org/stable/c/a6715d7ec472a476db17787697a4abda62962284 · Note
• https://twitter.com/CVEnew/status/2078981225826459981 · Twitter Post
• https://twitter.com/infoflowcloud/status/2078982227220684869 · Twitter Post
• https://git.kernel.org/stable/c/a6ac6721326a75ff2d14c68db05f93b576d8762f · Note