CVE-2026-89962

Name of the Vulnerable Software and Affected Versions Linux kernel (affected versions not specified)

Description A logic flaw exists in the merge memory ranges() function within the powerpc/kexec file component. The function incorrectly handles overlapping memory ranges by comparing the current range's start against the previous element instead of the running target index and unconditionally overwriting the end of the range. This results in memory truncation when a larger memory range subsumes smaller subsequent ranges, causing valid memory fragments to be lost from the kexec exclude lists. Consequently, the crash kernel may overwrite active memory, leading to data corruption or system crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.