In the Linux kernel, the following vulnerability has been resolved:
efi: fix potential NULL deref in efi_mem_reserve_persistent
When iterating on a linked list, a result of memremap is dereferenced without checking it for NULL.
This patch adds a check that falls back on allocating a new page in case memremap doesn't succeed.
Found by Linux Verification Center (linuxtesting.org) with SVACE.
[ardb: return -ENOMEM instead of breaking out of the loop]
CVSS Details
- CVSS 3.1 Base Score: 5.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade perf-debuginfoUpgrade python-perfUpgrade bpftool-debuginfoUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-debuginfo-common-x86_64Upgrade kernel-livepatch-5.15.93-55.139Upgrade kernel-develUpgrade kernelUpgrade python-perf-debuginfoUpgrade kernel-livepatch-5.10.173-154.642Upgrade perfUpgrade kernel-headersUpgrade kernel-tools-debuginfoUpgrade kernel-debuginfo-common-aarch64Upgrade kernel-debuginfoUpgrade kernel-tools-devel | May 22, 2025 | Mar 27, 2025 |
| Amazon_linux_2023 | — | Upgrade kernel-toolsUpgrade kernelUpgrade kernel-libbpf-develUpgrade python3-perf-debuginfoUpgrade kernel-libbpf-staticUpgrade bpftoolUpgrade kernel-develUpgrade kernel-tools-develUpgrade kernel-debuginfo-common-aarch64Upgrade perfUpgrade kernel-headersUpgrade kernel-debuginfo-common-x86_64Upgrade bpftool-debuginfoUpgrade python3-perfUpgrade kernel-livepatch-6.1.12-17.42Upgrade perf-debuginfoUpgrade kernel-debuginfoUpgrade kernel-tools-debuginfoUpgrade kernel-libbpf | Jun 11, 2025 | Mar 27, 2025 |
| Debian | — | Upgrade linux | Mar 31, 2025 | Mar 27, 2025 |
| Huawei Euleros 2_0_sp13 | — | Upgrade kernelUpgrade python3-perfUpgrade kernel-abi-stablelistsUpgrade bpftoolUpgrade kernel-toolsUpgrade kernel-tools-libs | Jul 1, 2025 | Mar 27, 2025 |
| Redhat_linux | — | Upgrade kernelUpgrade kernel-rtNo solution exists | Jul 9, 2025 | Mar 27, 2025 |
| Ubuntu | — | Upgrade linux-intel-iot-realtimeUpgrade linux-oracleUpgrade linux-aws-fipsUpgrade linux-oracle-5.15Upgrade linux-azure-fipsUpgrade linux-gkeopUpgrade linux-azure-5.15Upgrade linux-nvidiaUpgrade linux-xilinx-zynqmpUpgrade linuxUpgrade linux-lowlatencyUpgrade linux-hwe-5.4Upgrade linux-gcp-5.4Upgrade linux-gcp-fipsUpgrade linux-ibm-5.4Upgrade linux-ibmUpgrade linux-awsUpgrade linux-fipsUpgrade linux-gcpUpgrade linux-aws-5.15Upgrade linux-bluefieldUpgrade linux-aws-5.4Upgrade linux-hwe-5.15Upgrade linux-raspi-5.4Upgrade linux-riscv-5.15Upgrade linux-intel-iotg-5.15Upgrade linux-azure-5.4Upgrade linux-realtimeUpgrade linux-oracle-5.4Upgrade linux-gcp-5.15Upgrade linux-intel-iotgUpgrade linux-raspiUpgrade linux-azureUpgrade linux-iotUpgrade linux-nvidia-tegra-5.15Upgrade linux-kvmUpgrade linux-lowlatency-hwe-5.15Upgrade linux-gke | Apr 1, 2025 | Mar 27, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | May 27, 2026 | Mar 27, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub