Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
CVE-2023-54146: Linux kernel may crash due to double memory free
CVE-2023-54146 · published 10 months ago
Summary
A coding mistake in the Linux kernel can cause the system to try to free the same memory area twice when loading a crash image, which could lead to a crash or instability. The problem affects several Linux distributions that use the kernel, including the HWE Edge and AWS/Azure builds. Updating to the latest kernel release that includes the fix will resolve the issue.
What to do
- Update canonical linux-aws-5.15 to version 5.15.0-1033.37~20.04.1.
- Update canonical linux-azure-5.15 to version 5.15.0-1035.42~20.04.1.
- Update canonical linux-gcp-5.15 to version 5.15.0-1031.38~20.04.1.
- Update canonical linux-hwe-5.15 to version 5.15.0-69.76~20.04.1.
- Update canonical linux-intel-iotg-5.15 to version 5.15.0-1027.32~20.04.1.
- Update canonical linux-lowlatency-hwe-5.15 to version 5.15.0-69.76~20.04.1.
- Update canonical linux-nvidia-tegra-5.15 to version 5.15.0-1014.14~20.04.1.
- Update canonical linux-oracle-5.15 to version 5.15.0-1032.38~20.04.1.
- Update canonical linux-riscv-5.15 to version 5.15.0-1030.34~20.04.1.
- Update canonical linux to version 5.15.0-69.76.
- Update canonical linux-aws to version 5.15.0-1033.37.
- Update canonical linux-azure to version 5.15.0-1035.42.
- Update canonical linux-gcp to version 5.15.0-1031.38.
- Update canonical linux-gke to version 5.15.0-1030.35.
- Update canonical linux-gkeop to version 5.15.0-1017.22.
- Update canonical linux-ibm to version 5.15.0-1027.30.
- Update canonical linux-intel-iotg to version 5.15.0-1027.32.
- Update canonical linux-kvm to version 5.15.0-1030.35.
- Update canonical linux-lowlatency to version 5.15.0-69.76.
- Update canonical linux-nvidia to version 5.15.0-1023.23.
- Update canonical linux-oracle to version 5.15.0-1032.38.
- Update canonical linux-raspi to version 5.15.0-1026.28.
- Update canonical linux-bluefield to version 5.15.0-1015.17.
- Update canonical linux-intel-iot-realtime to version 5.15.0-1023.28.
- Update canonical linux-realtime to version 5.15.0-1034.37.
- Update canonical linux-azure-fde to version 5.15.0-1035.42.1.
- Update linux kernel to version 6.1.5.
- Update debian linux to version 6.1.7-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | linux-hwe-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-aws-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-azure-edge | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gcp-5.3 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-4.15 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gke-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-gkeop-5.4 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-hwe | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oem | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.0 | All versions |
| Ubuntu:18.04:LTS | canonical | linux-oracle-5.3 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.15 |
< 5.15.0-1033.37~20.04.1 Fix: upgrade to 5.15.0-1033.37~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-azure-5.15 |
< 5.15.0-1035.42~20.04.1 Fix: upgrade to 5.15.0-1035.42~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.15 |
< 5.15.0-1031.38~20.04.1 Fix: upgrade to 5.15.0-1031.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.15 |
< 5.15.0-69.76~20.04.1 Fix: upgrade to 5.15.0-69.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-intel-iotg-5.15 |
< 5.15.0-1027.32~20.04.1 Fix: upgrade to 5.15.0-1027.32~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-lowlatency-hwe-5.15 |
< 5.15.0-69.76~20.04.1 Fix: upgrade to 5.15.0-69.76~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-nvidia-tegra-5.15 |
< 5.15.0-1014.14~20.04.1 Fix: upgrade to 5.15.0-1014.14~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.15 |
< 5.15.0-1032.38~20.04.1 Fix: upgrade to 5.15.0-1032.38~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.15 |
< 5.15.0-1030.34~20.04.1 Fix: upgrade to 5.15.0-1030.34~20.04.1
|
| Ubuntu:20.04:LTS | canonical | linux-aws-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-aws-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-azure-fde | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gcp-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gke-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop | All versions |
| Ubuntu:20.04:LTS | canonical | linux-gkeop-5.15 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-hwe-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-intel-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.10 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.14 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oem-5.6 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.13 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-oracle-5.8 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-raspi2 | All versions |
Showing 50 of 113. Show the rest
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:20.04:LTS | canonical | linux-riscv | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.11 | All versions |
| Ubuntu:20.04:LTS | canonical | linux-riscv-5.8 | All versions |
| Ubuntu:22.04:LTS | canonical | linux |
< 5.15.0-69.76 Fix: upgrade to 5.15.0-69.76
|
| Ubuntu:22.04:LTS | canonical | linux-allwinner-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws |
< 5.15.0-1033.37 Fix: upgrade to 5.15.0-1033.37
|
| Ubuntu:22.04:LTS | canonical | linux-aws-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-aws-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure |
< 5.15.0-1035.42 Fix: upgrade to 5.15.0-1035.42
|
| Ubuntu:22.04:LTS | canonical | linux-azure-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp |
< 5.15.0-1031.38 Fix: upgrade to 5.15.0-1031.38
|
| Ubuntu:22.04:LTS | canonical | linux-gcp-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gcp-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-gke |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-gkeop |
< 5.15.0-1017.22 Fix: upgrade to 5.15.0-1017.22
|
| Ubuntu:22.04:LTS | canonical | linux-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-ibm |
< 5.15.0-1027.30 Fix: upgrade to 5.15.0-1027.30
|
| Ubuntu:22.04:LTS | canonical | linux-intel-iot-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-intel-iotg |
< 5.15.0-1027.32 Fix: upgrade to 5.15.0-1027.32
|
| Ubuntu:22.04:LTS | canonical | linux-kvm |
< 5.15.0-1030.35 Fix: upgrade to 5.15.0-1030.35
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency |
< 5.15.0-69.76 Fix: upgrade to 5.15.0-69.76
|
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-lowlatency-hwe-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia |
< 5.15.0-1023.23 Fix: upgrade to 5.15.0-1023.23
|
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-nvidia-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-5.17 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.0 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.1 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oem-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-oracle |
< 5.15.0-1032.38 Fix: upgrade to 5.15.0-1032.38
|
| Ubuntu:22.04:LTS | canonical | linux-oracle-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-raspi |
< 5.15.0-1026.28 Fix: upgrade to 5.15.0-1026.28
|
| Ubuntu:22.04:LTS | canonical | linux-realtime | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-riscv-6.5 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-5.19 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.2 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-starfive-6.5 | All versions |
| Ubuntu:Nvidia-BlueField:22.04:LTS | canonical | linux-bluefield |
< 5.15.0-1015.17 Fix: upgrade to 5.15.0-1015.17
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-intel-iot-realtime |
< 5.15.0-1023.28 Fix: upgrade to 5.15.0-1023.28
|
| Ubuntu:Pro:Realtime:22.04:LTS | canonical | linux-realtime |
< 5.15.0-1034.37 Fix: upgrade to 5.15.0-1034.37
|
| Ubuntu:24.04:LTS | canonical | linux-azure-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-gcp-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-lowlatency-hwe-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-nvidia-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.11 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-oem-6.8 | All versions |
| Ubuntu:24.04:LTS | canonical | linux-raspi-realtime | All versions |
| Ubuntu:24.04:LTS | canonical | linux-riscv-6.14 | All versions |
| Ubuntu:22.04:LTS | canonical | linux-azure-fde |
< 5.15.0-1035.42.1 Fix: upgrade to 5.15.0-1035.42.1
|
| Linux | linux | kernel |
>= 5.19.0, < 6.1.5 Fix: upgrade to 6.1.5
|
| Debian:12 | debian | linux |
< 6.1.7-1 Fix: upgrade to 6.1.7-1
|
Original advisory text
x86/kexec: Fix double-free of elf header buffer
In the Linux kernel, the following vulnerability has been resolved: x86/kexec: Fix double-free of elf header buffer After b3e34a47f989 ("x86/kexec: fix memory leak of elf header buffer"), freeing image->elf_headers in the error path of crash_load_segments() is not needed because kimage_file_post_load_cleanup() will take care of that later. And not clearing it could result in a double-free. Drop the superfluous vfree() call at the error path of crash_load_segments().
References
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/54xxx/CVE-2023-54146... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2023-54146 Vendor Advisory
- https://git.kernel.org/pub/scm/linux/kernel/git/stable/linux.git Product
- https://git.kernel.org/stable/c/5bd3c7abeb69fb4133418b846a1c6dc11313d6f0 Third Party Advisory
- https://git.kernel.org/stable/c/d00dd2f2645dca04cf399d8fc692f3f69b6dd996 Third Party Advisory
- https://ubuntu.com/security/CVE-2023-54146 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2023-54146 Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-54146 Vendor Advisory
- https://git.kernel.org/stable/c/4c71a552b97fb4f46eb300224434fe56fcf4f254 Third Party Advisory
- https://git.kernel.org/stable/c/554a880a1fff46dd5a355dec21cd77d542a0ddf2 Third Party Advisory
- https://git.kernel.org/stable/c/fbdbf8ac333d3d47c0d9ea81d7d445654431d100 Third Party Advisory
Timeline
Published24 Dec 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2023-54146 · NVD
UBUNTU-CVE-2023-54146 · OSV
CVE-2023-54146 · OSV
DEBIAN-CVE-2023-54146 · OSV
Track software like this
Free during beta