An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade python-perfUpgrade bpftool-debuginfoUpgrade kernelUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-livepatch-4.14.294-220.533Upgrade kernel-debuginfo-common-x86_64Upgrade python-perf-debuginfoUpgrade kernel-livepatch-5.15.69-37.134Upgrade perf-debuginfoUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfoUpgrade kernel-livepatch-5.10.144-127.601Upgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade bpftool | Oct 11, 2022 | Sep 9, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Sep 9, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-tools-develUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-develUpgrade kernel-libbpfUpgrade kernel-tools-debuginfoUpgrade perfUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade kernel-debuginfoUpgrade bpftoolUpgrade python3-perfUpgrade kernel-libbpf-staticUpgrade kernel-libbpf-develUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernelUpgrade kernel-toolsUpgrade bpftool-debuginfoUpgrade kernel-debuginfo-common-x86_64 | Feb 17, 2025 | Sep 7, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernelUpgrade kernel-tools-libsUpgrade kernel-abi-stablelists | Dec 22, 2022 | Sep 9, 2022 |
| Suse | — | Upgrade kernel-azureUpgrade kernel-preempt-develUpgrade kernel-vanilla-livepatch-develUpgrade kernel-docsUpgrade kernel-zfcpdump-manUpgrade kernel-default-baseUpgrade kernel-azure-develUpgrade kernel-obs-buildUpgrade kernel-debug-baseUpgrade kernel-preemptUpgrade kernel-kvmsmall-baseUpgrade kernel-defaultUpgrade kernel-source-azureUpgrade kernel-default-extraUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-vanilla-develUpgrade kernel-devel-azureUpgrade kernel-syms-azureUpgrade kernel-azure-baseUpgrade kernel-vanillaUpgrade kernel-symsUpgrade kernel-sourceUpgrade reiserfs-kmp-defaultUpgrade kernel-default-develUpgrade kernel-vanilla-baseUpgrade kernel-devel | Nov 30, 2022 | Sep 9, 2022 |
| Ubuntu | — | Upgrade linux-image-kvmUpgrade linux-image-4.15.0-201-generic-lpaeUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-oemUpgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-gkeUpgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-gke-5.4Upgrade linux-image-4.15.0-1147-awsUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-oracle-lts-18.04Upgrade linux-image-gkeop-5.15Upgrade linux-image-raspi-hwe-18.04Upgrade linux-image-4.15.0-201-lowlatencyUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-4.15.0-1143-snapdragonUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-dell300xUpgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.15.0-1030-azureUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-bluefieldUpgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-oracleUpgrade linux-image-generic-64k-hwe-22.04Upgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-aws-lts-18.04Upgrade linux-image-generic-hwe-16.04Upgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-1100-azureUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-raspi-nolpaeUpgrade linux-image-4.15.0-1142-gcpUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-4.15.0-1058-dell300xUpgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-5.4.0-136-genericUpgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-4.15.0-1147-aws-hweUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-4.15.0-1158-azureUpgrade linux-image-gkeop-5.4Upgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-4.15.0-201-genericUpgrade linux-image-oem-osp1Upgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1112-oracleUpgrade linux-image-aws-hweUpgrade linux-image-ibmUpgrade linux-image-raspi2Upgrade linux-image-gcpUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.19.0-1016-awsUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-4.15.0-1125-raspi2Upgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-genericUpgrade linux-image-virtualUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-generic-64kUpgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-lowlatencyUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-4.15.0-1133-kvmUpgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-gkeopUpgrade linux-image-generic-lpaeUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-aws-lts-20.04Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-gke-5.15Upgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-azure-lts-20.04Upgrade linux-image-aws-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-azure-lts-22.04Upgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-azureUpgrade linux-image-lowlatency-hwe-22.04 | Jan 7, 2023 | Sep 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub