{"id":"CVE-2026-89963","title":"In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/kexec_file: Fix null-ptr-def in extra size calculation\n\nA static Sashiko AI review identified a potential NULL pointer\ndereference in kexec_extra_fdt_size_ppc64…","summary":"In the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/kexec_file: Fix null-ptr-def in extra size calculation\n\nA static Sashiko AI review identified a potential NULL pointer\ndereference in kexec_extra_fdt_size_ppc64…","severity":"none","vendor":"Linux","product":"Linux","affected":["Linux >= 0d3ff067331ef84e7e7f49537d768881042ed5ba < 11ef1c2a5dbe0bd8c1345f59bab7331d352f02cf","Linux >= 0d3ff067331ef84e7e7f49537d768881042ed5ba < df45337587db21c502fe5251d3bcc7887428f4fb","Linux >= 0d3ff067331ef84e7e7f49537d768881042ed5ba < 4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0dea","Linux >= 0d3ff067331ef84e7e7f49537d768881042ed5ba < 761eda315a6e1fda3e8e2185b28430771fb1ac29","Linux 6.11"],"published":"2026-09-16","updated":"2026-09-16","sourceUpdated":"2026-09-16T11:17:06.807","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-89963","references":[{"url":"https://git.kernel.org/stable/c/11ef1c2a5dbe0bd8c1345f59bab7331d352f02cf","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/4ff3d9fd71c7bc2fc81afdac1970d9c55a5c0dea","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/761eda315a6e1fda3e8e2185b28430771fb1ac29","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"},{"url":"https://git.kernel.org/stable/c/df45337587db21c502fe5251d3bcc7887428f4fb","label":"416baaa9-dc9f-4396-8d5f-8c081fb06d67"}],"tags":["nvd","cve.org"],"ingestedAt":"2026-09-16T10:53:53.960Z","epss":0.002,"epssPercentile":0.10122,"slug":"CVE-2026-89963","body":"## Overview\n\nIn the Linux kernel, the following vulnerability has been resolved:\n\npowerpc/kexec_file: Fix null-ptr-def in extra size calculation\n\nA static Sashiko AI review identified a potential NULL pointer\ndereference in kexec_extra_fdt_size_ppc64().\n\nOn platforms without any reserved memory regions,\nget_reserved_memory_ranges() can return 0 while leaving 'rmem'\nunallocated as NULL. Passing it directly leads to a kernel panic when\nevaluating 'rmem->nr_ranges'.\n\nAdd a NULL check for 'rmem' to prevent this crash.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}