CVE-2026-72013

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A NULL pointer dereference occurs in the riscv architecture within the machine kexec prepare() function. This happens because image->segment[i].buf may be NULL and is copied without validation. The issue originates in ima add kexec buffer(), where a buffer added by kexec add buffer() has a NULL kbuf.buffer value, which is subsequently processed by memcpy() during the machine kexec prepare() execution flow.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.