CVE-2026-64167

A flaw was found in the Linux kernel's kexec_handover (KHO) mechanism. This vulnerability occurs because the kho_fill_kimage() function unconditionally populates the kimage with KHO metadata, even when processing a crash kernel. When a crash kernel attempts to initialize KHO memory, it can try to access memory outside its reserved region, leading to a kernel paging request fault. This can result in a system crash, causing a Denial of Service (DoS) for a local user.