The Linux kernel riscv architecture contained a NULL pointer dereference vulnerability in machine_kexec_prepare(). Specifically, image->segment[i].buf could be NULL due to the way buffers are added via ima_add_kexec_buffer() and kexec_add_buffer(), but machine_kexec_prepare() attempted to copy this buffer without verifying its validity. This could lead to a kernel NULL pointer dereference. The fix involves adding a validation check before the memcpy operation to ensure the buffer is not NULL.

This vulnerability can cause a NULL pointer dereference in the kernel, which typically results in a kernel panic or system crash. There is no indication of privilege escalation or arbitrary code execution from the provided data. No known exploits in the wild have been reported.

A fix has been implemented in the Linux kernel source code by adding a check before copying the buffer to prevent NULL pointer dereference. Users should update their Linux kernel to a version that includes this fix once it is released. Patch status is not yet confirmed in this data; check the official Linux kernel advisories or vendor updates for the exact fixed versions and patches.