CVE-2026-64167

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description An issue exists where the kho fill kimage() function unconditionally populates the kimage with KHO metadata for every kexec image type. When a crash kernel is used, it may operate within a small reserved region, causing KHO scratch areas to be located outside this region. This leads to a kernel paging request fault during kho memory init() when the system attempts to perform phys to virt() on the KHO FDT address. This occurs because kho fill kimage() lacked the guard present in kho locate mem hole() to skip KHO logic for KEXEC TYPE CRASH images.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.