An issue was discovered in the Linux kernel through 5.19.8. drivers/firmware/efi/capsule-loader.c has a race condition with a resultant use-after-free.
CVSS Details
- CVSS 3.1 Base Score: 4.7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade bpftoolUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-develUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-develUpgrade perfUpgrade kernel-livepatch-5.10.144-127.601Upgrade perf-debuginfoUpgrade bpftool-debuginfoUpgrade kernelUpgrade python-perf-debuginfoUpgrade python-perfUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-4.14.294-220.533Upgrade kernel-livepatch-5.15.69-37.134Upgrade kernel-headers | Oct 11, 2022 | Sep 9, 2022 |
| Amazon_linux | — | Upgrade kernel | Oct 11, 2022 | Sep 9, 2022 |
| Amazon_linux_2023 | — | Upgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-tools-debuginfoUpgrade kernel-libbpfUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade python3-perf-debuginfoUpgrade perfUpgrade kernel-livepatch-6.1.10-15.42Upgrade kernel-debuginfoUpgrade kernel-develUpgrade python3-perfUpgrade bpftool-debuginfoUpgrade perf-debuginfoUpgrade kernel-headersUpgrade kernel-toolsUpgrade kernel-libbpf-develUpgrade kernel-debuginfo-common-x86_64Upgrade kernel | Feb 17, 2025 | Sep 7, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Sep 9, 2022 |
| Debian | — | Upgrade linux | Oct 3, 2022 | Sep 9, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade kernel-toolsUpgrade python3-perfUpgrade kernel-tools-libsUpgrade kernelUpgrade kernel-abi-stablelists | Dec 22, 2022 | Sep 9, 2022 |
| Suse | — | Upgrade kernel-debug-baseUpgrade kernel-obs-buildUpgrade kernel-kvmsmall-baseUpgrade kernel-docsUpgrade kernel-defaultUpgrade kernel-zfcpdump-manUpgrade kernel-preempt-develUpgrade kernel-default-baseUpgrade kernel-vanilla-livepatch-develUpgrade kernel-azure-develUpgrade kernel-azureUpgrade kernel-preemptUpgrade kernel-vanilla-baseUpgrade kernel-sourceUpgrade kernel-default-extraUpgrade kernel-develUpgrade kernel-azure-baseUpgrade kernel-vanillaUpgrade reiserfs-kmp-defaultUpgrade kernel-syms-azureUpgrade kernel-symsUpgrade kernel-devel-azureUpgrade kernel-vanilla-develUpgrade kernel-macrosUpgrade kernel-default-manUpgrade kernel-source-azureUpgrade kernel-default-devel | Nov 30, 2022 | Sep 9, 2022 |
| Ubuntu | — | Upgrade linux-image-generic-hwe-18.04Upgrade linux-image-4.15.0-1125-raspi2Upgrade linux-image-aws-lts-22.04Upgrade linux-image-azure-lts-20.04Upgrade linux-image-5.19.0-1011-raspiUpgrade linux-image-oem-22.04aUpgrade linux-image-generic-64k-hwe-20.04Upgrade linux-image-gkeop-5.4Upgrade linux-image-5.15.0-1027-gkeUpgrade linux-image-5.17.0-1031-oemUpgrade linux-image-5.4.0-1100-azure-fdeUpgrade linux-image-ibm-lts-20.04Upgrade linux-image-aws-hweUpgrade linux-image-azure-fdeUpgrade linux-image-4.15.0-1112-oracleUpgrade linux-image-5.19.0-1014-oracleUpgrade linux-image-azure-lts-22.04Upgrade linux-image-lowlatency-64kUpgrade linux-image-generic-lpae-hwe-18.04Upgrade linux-image-5.4.0-1091-oracleUpgrade linux-image-gke-5.15Upgrade linux-image-gkeopUpgrade linux-image-generic-64kUpgrade linux-image-5.4.0-1078-raspiUpgrade linux-image-5.19.0-1014-lowlatencyUpgrade linux-image-5.19.0-1016-awsUpgrade linux-image-5.15.0-1026-gcpUpgrade linux-image-ibmUpgrade linux-image-virtual-hwe-16.04Upgrade linux-image-5.19.0-1014-gcpUpgrade linux-image-5.15.0-57-genericUpgrade linux-image-5.15.0-1022-raspi-nolpaeUpgrade linux-image-oem-osp1Upgrade linux-image-5.19.0-28-generic-lpaeUpgrade linux-image-5.19.0-28-generic-64kUpgrade linux-image-generic-lpaeUpgrade linux-image-raspiUpgrade linux-image-lowlatency-hwe-22.04Upgrade linux-image-5.4.0-1054-bluefieldUpgrade linux-image-snapdragon-hwe-18.04Upgrade linux-image-5.15.0-1030-azure-fdeUpgrade linux-image-gcp-lts-18.04Upgrade linux-image-oem-22.04Upgrade linux-image-5.4.0-1091-gkeUpgrade linux-image-4.15.0-201-genericUpgrade linux-image-5.15.0-1024-gkeUpgrade linux-image-5.19.0-1016-azureUpgrade linux-image-5.15.0-1026-oracleUpgrade linux-image-lowlatencyUpgrade linux-image-virtualUpgrade linux-image-lowlatency-64k-hwe-22.04Upgrade linux-image-azureUpgrade linux-image-5.15.0-1012-gkeopUpgrade linux-image-genericUpgrade linux-image-raspi2Upgrade linux-image-aws-lts-20.04Upgrade linux-image-4.15.0-1133-kvmUpgrade linux-image-gcpUpgrade linux-image-gcp-lts-20.04Upgrade linux-image-5.19.0-1014-lowlatency-64kUpgrade linux-image-5.15.0-57-lowlatency-64kUpgrade linux-image-virtual-hwe-22.04Upgrade linux-image-snapdragonUpgrade linux-image-virtual-hwe-18.04Upgrade linux-image-5.19.0-1015-kvmUpgrade linux-image-5.15.0-1030-azureUpgrade linux-image-5.15.0-1022-ibmUpgrade linux-image-5.4.0-1083-kvmUpgrade linux-image-awsUpgrade linux-image-5.15.0-1022-raspiUpgrade linux-image-oracle-lts-18.04Upgrade linux-image-kvmUpgrade linux-image-generic-lpae-hwe-20.04Upgrade linux-image-azure-lts-18.04Upgrade linux-image-5.4.0-1097-gcpUpgrade linux-image-dell300xUpgrade linux-image-raspi-nolpaeUpgrade linux-image-aws-lts-18.04Upgrade linux-image-5.15.0-1025-kvmUpgrade linux-image-bluefieldUpgrade linux-image-5.4.0-136-lowlatencyUpgrade linux-image-4.15.0-1158-azureUpgrade linux-image-5.4.0-1093-awsUpgrade linux-image-4.15.0-1147-awsUpgrade linux-image-gkeop-5.15Upgrade linux-image-5.4.0-1061-gkeopUpgrade linux-image-oracle-lts-20.04Upgrade linux-image-4.15.0-1142-gcpUpgrade linux-image-generic-hwe-16.04Upgrade linux-image-generic-hwe-20.04Upgrade linux-image-5.19.0-1014-ibmUpgrade linux-image-gke-5.4Upgrade linux-image-generic-lpae-hwe-22.04Upgrade linux-image-oemUpgrade linux-image-5.19.0-1011-raspi-nolpaeUpgrade linux-image-lowlatency-hwe-16.04Upgrade linux-image-5.15.0-57-generic-64kUpgrade linux-image-gkeUpgrade linux-image-4.15.0-201-lowlatencyUpgrade linux-image-5.19.0-28-genericUpgrade linux-image-raspi-hwe-18.04Upgrade linux-image-5.4.0-1100-azureUpgrade linux-image-4.15.0-1147-aws-hweUpgrade linux-image-virtual-hwe-20.04Upgrade linux-image-5.4.0-136-genericUpgrade linux-image-4.15.0-1143-snapdragonUpgrade linux-image-lowlatency-hwe-18.04Upgrade linux-image-4.15.0-201-generic-lpaeUpgrade linux-image-5.4.0-1041-ibmUpgrade linux-image-5.4.0-136-generic-lpaeUpgrade linux-image-5.15.0-1027-awsUpgrade linux-image-4.15.0-1058-dell300xUpgrade linux-image-oracleUpgrade linux-image-generic-hwe-22.04Upgrade linux-image-5.15.0-57-lowlatencyUpgrade linux-image-5.15.0-57-generic-lpaeUpgrade linux-image-generic-64k-hwe-22.04 | Jan 7, 2023 | Sep 9, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub