In the Linux kernel, the following vulnerability has been resolved:
efi: libstub: only free priv.runtime_map when allocated
priv.runtime_map is only allocated when efi_novamap is not set. Otherwise, it is an uninitialized value. In the error path, it is freed unconditionally. Avoid passing an uninitialized value to free_pool. Free priv.runtime_map only when it was allocated.
This bug was discovered and resolved using Coverity Static Analysis Security Testing (SAST) by Synopsys, Inc.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-modules-extraUpgrade python3-perfUpgrade kernel-tools-develUpgrade perfUpgrade kernel-libbpfUpgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perf-debuginfoUpgrade kernel-livepatch-6.1.94-99.176Upgrade perf-debuginfoUpgrade kernel-toolsUpgrade kernel-modules-extra-commonUpgrade kernel-libbpf-develUpgrade kernelUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfo | Feb 17, 2025 | Jun 21, 2024 |
| Debian | — | Upgrade linux | Jul 30, 2024 | Jun 21, 2024 |
| Suse | — | Upgrade gfs2-kmp-azureUpgrade kernel-64kb-extraUpgrade kernel-default-baseUpgrade kernel-rt-vdsoUpgrade kernel-default-base-rebuildUpgrade kernel-azure-optionalUpgrade kernel-rtUpgrade ocfs2-kmp-defaultUpgrade dtb-allwinnerUpgrade dtb-amazonUpgrade kernel-default-livepatchUpgrade cluster-md-kmp-64kbUpgrade gfs2-kmp-defaultUpgrade kernel-rt-optionalUpgrade kernel-source-azureUpgrade dlm-kmp-rtUpgrade dtb-alteraUpgrade ocfs2-kmp-64kbUpgrade kernel-azure-develUpgrade kernel-azure-extraUpgrade kernel-rt_debug-develUpgrade kernel-source-rtUpgrade dtb-freescaleUpgrade kernel-rt_debugUpgrade dlm-kmp-64kbUpgrade kernel-docs-htmlUpgrade kernel-kvmsmall-vdsoUpgrade kernel-rt-livepatch-develUpgrade kernel-source-vanillaUpgrade kernel-defaultUpgrade kernel-azureUpgrade dtb-rockchipUpgrade dtb-qcomUpgrade dtb-socionextUpgrade kernel-kvmsmall-livepatch-develUpgrade kernel-obs-buildUpgrade dtb-appleUpgrade kernel-azure-vdsoUpgrade dtb-lgUpgrade dtb-broadcomUpgrade reiserfs-kmp-rtUpgrade kselftests-kmp-azureUpgrade dtb-sprdUpgrade dtb-nvidiaUpgrade dtb-marvellUpgrade kernel-rt-extraUpgrade reiserfs-kmp-64kbUpgrade kernel-rt_debug-livepatch-develUpgrade dtb-caviumUpgrade kselftests-kmp-64kbUpgrade kernel-default-vdsoUpgrade dtb-exynosUpgrade kernel-debug-vdsoUpgrade dlm-kmp-defaultUpgrade dtb-mediatekUpgrade ocfs2-kmp-rtUpgrade cluster-md-kmp-azureUpgrade kernel-syms-azureUpgrade kernel-rt-develUpgrade kernel-develUpgrade reiserfs-kmp-defaultUpgrade kernel-default-extraUpgrade kernel-64kb-develUpgrade gfs2-kmp-64kbUpgrade kselftests-kmp-rtUpgrade kernel-docsUpgrade kernel-sourceUpgrade kernel-rt-livepatchUpgrade kernel-macrosUpgrade kernel-kvmsmall-develUpgrade kernel-default-livepatch-develUpgrade kernel-debug-develUpgrade gfs2-kmp-rtUpgrade dtb-amlogicUpgrade cluster-md-kmp-defaultUpgrade reiserfs-kmp-azureUpgrade kernel-azure-livepatch-develUpgrade dtb-hisiliconUpgrade dtb-armUpgrade dlm-kmp-azureUpgrade ocfs2-kmp-azureUpgrade kernel-kvmsmallUpgrade kernel-default-optionalUpgrade dtb-renesasUpgrade kernel-devel-rtUpgrade dtb-amdUpgrade dtb-xilinxUpgrade kernel-zfcpdumpUpgrade kernel-syms-rtUpgrade kernel-debug-livepatch-develUpgrade kernel-symsUpgrade kernel-rt_debug-vdsoUpgrade kernel-64kb-optionalUpgrade kernel-64kbUpgrade dtb-apmUpgrade kernel-debugUpgrade kernel-devel-azureUpgrade kselftests-kmp-defaultUpgrade kernel-obs-qaUpgrade kernel-64kb-livepatch-develUpgrade kernel-default-develUpgrade cluster-md-kmp-rt | Jul 10, 2024 | Jun 21, 2024 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-oem-22.04aUpgrade linux-image-6.8.0-1013-nvidia-lowlatencyUpgrade linux-image-raspiUpgrade linux-image-6.8.0-44-generic-64kUpgrade linux-image-generic-hwe-24.04Upgrade linux-image-azureUpgrade linux-image-azure-fdeUpgrade linux-image-6.8.0-44-genericUpgrade linux-image-lowlatencyUpgrade linux-image-nvidia-lowlatency-64kUpgrade linux-image-ibmUpgrade linux-image-ibm-classicUpgrade linux-image-generic-lpaeUpgrade linux-image-generic-64k-hwe-24.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-oem-22.04cUpgrade linux-image-ibm-lts-24.04Upgrade linux-image-6.8.0-45-genericUpgrade linux-image-nvidiaUpgrade linux-image-6.8.0-1014-azure-fdeUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-oem-22.04bUpgrade linux-image-generic-64kUpgrade linux-image-6.8.0-1012-oemUpgrade linux-image-awsUpgrade linux-image-6.8.0-45-generic-64kUpgrade linux-image-nvidia-lowlatencyUpgrade linux-image-6.8.0-1014-gcpUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-oem-22.04dUpgrade linux-image-nvidia-64k-6.8Upgrade linux-image-6.8.0-44-lowlatencyUpgrade linux-image-oracleUpgrade linux-image-6.8.0-1012-ibmUpgrade linux-image-6.8.0-44-lowlatency-64kUpgrade linux-image-virtualUpgrade linux-image-virtual-hwe-24.04Upgrade linux-image-6.8.0-1012-oracleUpgrade linux-image-gkeUpgrade linux-image-6.8.0-1011-raspiUpgrade linux-image-genericUpgrade linux-image-6.8.0-1013-nvidiaUpgrade linux-image-nvidia-64kUpgrade linux-image-nvidia-6.8Upgrade linux-image-6.8.0-1013-nvidia-lowlatency-64kUpgrade linux-image-6.8.0-1012-oracle-64kUpgrade linux-image-6.8.0-1013-nvidia-64kUpgrade linux-image-6.8.0-1014-azureUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-oracle-64kUpgrade linux-image-gcpUpgrade linux-image-oem-22.04Upgrade linux-image-6.8.0-1015-awsUpgrade linux-image-6.8.0-1010-gke | Sep 12, 2024 | Jun 21, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Oct 14, 2025 | Jun 21, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub